Page 10 of 13
Re: samyGOso (.so injection - patching exeDSP/exeAPP)
Posted: Wed Mar 16, 2016 11:27 am
by zoelechat
How about using Telnet on 23 now you have full root?

3123 is NOT root.
Re: samyGOso (.so injection - patching exeDSP/exeAPP)
Posted: Wed Mar 16, 2016 11:41 am
by johnbrade
That is what i have when try with Telnet on 23 with filezilla:
Code: Select all
Status: Connecting to 192.168.188.29:23...
Status: Connection established, waiting for welcome message...
Status: Invalid character sequence received, disabling UTF-8. Select UTF-8 option in site manager to force UTF-8.
Response: ????????
Error: Could not connect to server
Status: Waiting to retry...
Status: Connecting to 192.168.188.29:23...
Status: Connection established, waiting for welcome message...
Status: Invalid character sequence received, disabling UTF-8. Select UTF-8 option in site manager to force UTF-8.
Response: ????????
Error: Could not connect to server
With netcat I have this:
Code: Select all
John-MBP:~ John$ nc 192.168.188.29 23
????????
/mnt #
Re: samyGOso (.so injection - patching exeDSP/exeAPP)
Posted: Wed Mar 16, 2016 12:07 pm
by zoelechat
TELNET !! Not FTP nor netcat

FileZilla is FTP, nc is NetCat, you need Telnet.
Re: samyGOso (.so injection - patching exeDSP/exeAPP)
Posted: Wed Mar 16, 2016 12:16 pm
by johnbrade
How can I do for Telnet?
I try with Putty and I have this:
Re: samyGOso (.so injection - patching exeDSP/exeAPP)
Posted: Wed Mar 16, 2016 12:32 pm
by zoelechat
Ok, now you can enter commands

Re: samyGOso (.so injection - patching exeDSP/exeAPP)
Posted: Wed Mar 16, 2016 12:48 pm
by johnbrade
I enter the command but nothing happen
Re: samyGOso (.so injection - patching exeDSP/exeAPP)
Posted: Wed Mar 16, 2016 12:49 pm
by zoelechat
Means it worked

Were you expecting "Welcome to SamyGO!! You have successfully given execute permissions to your binary!!!" output?

Re: samyGOso (.so injection - patching exeDSP/exeAPP)
Posted: Wed Mar 16, 2016 12:52 pm
by johnbrade
Re: samyGOso (.so injection - patching exeDSP/exeAPP)
Posted: Wed Mar 16, 2016 12:54 pm
by zoelechat
If you carefully follow procedure without asking yourself the wrong questions, yes

Re: samyGOso (.so injection - patching exeDSP/exeAPP)
Posted: Wed Mar 16, 2016 12:56 pm
by johnbrade
ok I will try now
