Page 10 of 13

Re: samyGOso (.so injection - patching exeDSP/exeAPP)

Posted: Wed Mar 16, 2016 11:27 am
by zoelechat
How about using Telnet on 23 now you have full root? :)
3123 is NOT root.

Re: samyGOso (.so injection - patching exeDSP/exeAPP)

Posted: Wed Mar 16, 2016 11:41 am
by johnbrade
That is what i have when try with Telnet on 23 with filezilla:

Code: Select all

Status:      	Connecting to 192.168.188.29:23...
Status:      	Connection established, waiting for welcome message...
Status:      	Invalid character sequence received, disabling UTF-8. Select UTF-8 option in site manager to force UTF-8.
Response: 	????????
Error:        	Could not connect to server
Status:      	Waiting to retry...
Status:      	Connecting to 192.168.188.29:23...
Status:      	Connection established, waiting for welcome message...
Status:      	Invalid character sequence received, disabling UTF-8. Select UTF-8 option in site manager to force UTF-8.
Response: 	????????
Error:        	Could not connect to server
With netcat I have this:

Code: Select all

John-MBP:~ John$ nc 192.168.188.29 23
????????
/mnt # 


Re: samyGOso (.so injection - patching exeDSP/exeAPP)

Posted: Wed Mar 16, 2016 12:07 pm
by zoelechat
TELNET !! Not FTP nor netcat :)
FileZilla is FTP, nc is NetCat, you need Telnet.

Re: samyGOso (.so injection - patching exeDSP/exeAPP)

Posted: Wed Mar 16, 2016 12:16 pm
by johnbrade
How can I do for Telnet?
I try with Putty and I have this:

Re: samyGOso (.so injection - patching exeDSP/exeAPP)

Posted: Wed Mar 16, 2016 12:32 pm
by zoelechat
Ok, now you can enter commands :D

Re: samyGOso (.so injection - patching exeDSP/exeAPP)

Posted: Wed Mar 16, 2016 12:48 pm
by johnbrade
I enter the command but nothing happen

Re: samyGOso (.so injection - patching exeDSP/exeAPP)

Posted: Wed Mar 16, 2016 12:49 pm
by zoelechat
Means it worked :)
Were you expecting "Welcome to SamyGO!! You have successfully given execute permissions to your binary!!!" output? :D

Re: samyGOso (.so injection - patching exeDSP/exeAPP)

Posted: Wed Mar 16, 2016 12:52 pm
by johnbrade
:D :D :D
I'm now able to downgrade?

Re: samyGOso (.so injection - patching exeDSP/exeAPP)

Posted: Wed Mar 16, 2016 12:54 pm
by zoelechat
If you carefully follow procedure without asking yourself the wrong questions, yes :)

Re: samyGOso (.so injection - patching exeDSP/exeAPP)

Posted: Wed Mar 16, 2016 12:56 pm
by johnbrade
ok I will try now :D