Comments (23)
trufae
commented on June 2, 2024
Use the makefile
… On 28 Dec 2016, at 15:50, tubleron ***@***.***> wrote:
i got the following error:
"compilation terminated. cp: cannot stat 'io_dirtycow.so': No such file or directory In file included from exploit.c:41:0, from cowpy.c:6: ptrace.c: In function ‘debuggee’: ptrace.c:24:3: warning: implicit declaration of function ‘err’ [-Wimplicit-function-declaration] err (1, "ptrace(PTRACE_TRACEME)"); ^ ptrace.c: In function ‘ptrace_memcpy’: ptrace.c:39:4: warning: implicit declaration of function ‘warn’ [-Wimplicit-function-declaration] warn("ptrace(PTRACE_POKETEXT)"); ^ ptrace.c: In function ‘ptraceThread’: ptrace.c:82:8: warning: implicit declaration of function ‘clone’ [-Wimplicit-function-declaration] pid = clone (debuggee, child_stack + sizeof (child_stack) - 8, flags, arg); ^ /tmp/cc7Rurmf.o: In functiondirtycow':
cowpy.c:(.text+0x614): undefined reference to pthread_create' cowpy.c:(.text+0x631): undefined reference topthread_create'
cowpy.c:(.text+0x657): undefined reference to pthread_create' cowpy.c:(.text+0x674): undefined reference topthread_create'
cowpy.c:(.text+0x685): undefined reference to pthread_join' cowpy.c:(.text+0x69d): undefined reference topthread_join'
collect2: error: ld returned 1 exit status
"`
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.
from dirtycow.
MatanTubul
commented on June 2, 2024
@trufae
when i execute "make" i get the following error:
Package r_util was not found in the pkg-config search path.
Perhaps you should add the directory containing `r_util.pc'
to the PKG_CONFIG_PATH environment variable
No package 'r_util' found
Package r_io was not found in the pkg-config search path.
Perhaps you should add the directory containing `r_io.pc'
to the PKG_CONFIG_PATH environment variable
No package 'r_io' found
cc -shared -fPIC -o io_dirtycow.so io_dirtycow.c
io_dirtycow.c:3:24: fatal error: r_userconf.h: No such file or directory
compilation terminated.
Makefile:10: recipe for target 'all' failed
make: *** [all] Error 1
from dirtycow.
trufae
commented on June 2, 2024
You have to install radare2 to build the plugin
… On 29 Dec 2016, at 09:29, tubleron ***@***.***> wrote:
@trufae
when i execute "make" i get the following error:
Package r_util was not found in the pkg-config search path.
Perhaps you should add the directory containing `r_util.pc'
to the PKG_CONFIG_PATH environment variable
No package 'r_util' found
Package r_io was not found in the pkg-config search path.
Perhaps you should add the directory containing `r_io.pc'
to the PKG_CONFIG_PATH environment variable
No package 'r_io' found
cc -shared -fPIC -o io_dirtycow.so io_dirtycow.c
io_dirtycow.c:3:24: fatal error: r_userconf.h: No such file or directory
compilation terminated.
Makefile:10: recipe for target 'all' failed
make: *** [all] Error 1
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub, or mute the thread.
from dirtycow.
MatanTubul
commented on June 2, 2024
do you know if this vulnerability should work on android 7.0
from dirtycow.
trufae
commented on June 2, 2024
Yep it is, unless you install the last security update from google. I wrote a blogpost in the nowsecure blogpost about this
… On 29 Dec 2016, at 13:10, tubleron ***@***.***> wrote:
do you know if this vulnerability should work on android 7.0
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub, or mute the thread.
from dirtycow.
MatanTubul
commented on June 2, 2024
i do not know currently i have android 7.1.1 and other device with 7.0.
from dirtycow.
trufae
commented on June 2, 2024
Thats up to the kernel version. Only nexus devices got the fix
… On 29 Dec 2016, at 13:15, tubleron ***@***.***> wrote:
i do not know currently i have android 7.1.1 and other device with 7.0
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub, or mute the thread.
from dirtycow.
MatanTubul
commented on June 2, 2024
after i installed the plugin i run make command.
i push the cowpy into the device but i get the follwoing error:
/data/local/tmp/cowpy: not executable: 64-bit ELF file
there is a way to do it 32 bit?
from dirtycow.
MatanTubul
commented on June 2, 2024
when i click on make its creating an executable file for x86 and i need it for ARM architecture.
how can i modify it? in addition after i get the cowpy file what is the execution command that i should run on the device?
from dirtycow.
trufae
commented on June 2, 2024
are you running this script inside Termux? this repo is suposed to be compiled in the target device itself. I have extended the README with a crosscompilation section
from dirtycow.
MatanTubul
commented on June 2, 2024
Ok
in order to run it on android device i should clone the radere2 repo and install it.
in addition you say i should clone the Termux repo?
i dont understand what should be done first in order to compile it?
from dirtycow.
trufae
commented on June 2, 2024
You dont need to clone radare or termux repo. Just install termux in android and clone this dirtycow repo in there.
R2 is already packaged in termux, if you want to build this on a computer you'll need to clone the repo of r2 because it contains the script to crosscompile and the sources to link the dirtycow plugin. But depending on what you need. Just cowpy is enough.
Cowpy copies the contents of the file src into the dst file. There's not much more to explain here, the source code is pretty small, did you read it? Or the readme?
… On 3 Jan 2017, at 09:55, tubleron ***@***.***> wrote:
Ok
in order to run it on android device i should clone the radere2 repo and install it.
in addition you say i should clone the Termux repo?
i dont understand what should be done first in order to compile it?
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub, or mute the thread.
from dirtycow.
MatanTubul
commented on June 2, 2024
now u run the build.sh within the termux and i get the following error:
from dirtycow.
trufae
commented on June 2, 2024
Use make to build. If you want the r2 plugin you must install the radare2-dev package or just build r2 inside termux toget that missing include file, and yes, you need to install make, clang, git...
Cowpy doesnt needs r2
… On 3 Jan 2017, at 10:26, tubleron ***@***.***> wrote:
now u run the build.sh within the termux and i get the following error:
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub, or mute the thread.
from dirtycow.
MatanTubul
commented on June 2, 2024
when i use "make" i still get the same error.
i have another question:
can i get a root access with this exploit?
in addition how should i use the "cowpy" what is the destination and src inputs?
from dirtycow.
MatanTubul
commented on June 2, 2024
i execute cowpy with the following parameters:
./cowpy hosts /system/etc/hosts
the output id "Done" but the hosts file under etc has no changes
from dirtycow.
trufae
commented on June 2, 2024
dirtycow exploits a race condition, the number of iterations depend on the cpu and the system load. change that in the code or run the program multiple times
… On 03 Jan 2017, at 14:41, tubleron ***@***.***> wrote:
i execute cowpy with the following parameters:
./cowpy hosts /system/etc/hosts
the output id "Done" but the hosts file under etc has no changes
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub <#4 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AGIjG1GmhjEOG0Rh8_62tyDZuh8mLMGiks5rOlACgaJpZM4LW96X>.
from dirtycow.
MatanTubul
commented on June 2, 2024
what do you mean "the number of iterations depend on the cpu and the system load"
maybe it depend on that i got the error which appear in the comment above?
from dirtycow.
trufae
commented on June 2, 2024
do you know what’s a race condition?
… On 03 Jan 2017, at 15:56, tubleron ***@***.***> wrote:
what do you mean "the number of iterations depend on the cpu and the system load"
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub <#4 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AGIjG_ltOaphXM-LD-MrQOxcGqKGAtAFks5rOmG2gaJpZM4LW96X>.
from dirtycow.
MatanTubul
commented on June 2, 2024
yes i understand what is it, but i m not sure if i should customize the code in order to get it work on my device.
from dirtycow.
radare
commented on June 2, 2024
Please see the last two commits
from dirtycow.
KindlyOnes
commented on June 2, 2024
now u run the build.sh within the termux and i get the following error:
Hi
Can you give me a guide on how to do this on android? I really would be very pleased.
from dirtycow.
trufae
commented on June 2, 2024
You need radare2-dev or compile it from source
… On 21 Mar 2020, at 00:22, dickyharper ***@***.***> wrote:
now u run the build.sh within the termux and i get the following error:
Hi
Can you give me a guide on how to do this on android? I really would be very pleased.
—
You are receiving this because you modified the open/close state.
Reply to this email directly, view it on GitHub, or unsubscribe.
from dirtycow.
Related Issues (7)
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from dirtycow.