Gregoire.Favre
12-01-2007, 16:22
Hello, I would like to download from sites like rapidshare, through an ssh connection on the router.
I have though of w3m because it display images in terminal and can run javascript, unfortunalety, with the modified firmware and oleg binaries :
w3m www.google.com
SIGSEGV
Any better idea ?
execve("/opt/bin/w3m", ["w3m", "www.google.com"], [/* 11 vars */]) = 0
svr4_syscall() = -1 ERRNO_4090 (Unknown error 4090)
stat("/etc/ld-opt.so.cache", 0x7fff7680) = -1 ENOENT (No such file or directory)
open("/opt/lib/libdl.so.0", O_RDONLY) = 3
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaa9000
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\10\0\1\0\0\0P\ 10\0"..., 4096) = 4096
old_mmap(NULL, 270336, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ab05000
old_mmap(0x2ab05000, 6516, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, -1, 0) = 0x2ab05000
old_mmap(0x2ab46000, 2600, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x1000) = 0x2ab4
close(3) = 0
munmap(0x2aaa9000, 4096) = 0
open("", O_RDONLY) = 3
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaa9000
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\ 0\0\0"..., 4096) = 4096
old_mmap(NULL, 344064, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ab47000
old_mmap(0x2ab47000, 54108, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2ab47000
old_mmap(0x2ab94000, 18960, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2ab94000
old_mmap(0x2ab99000, 7424, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, 3, 0x
close(3) = 0
munmap(0x2aaa9000, 4096) = 0
open("/opt/lib/libintl/opt/lib/libpthread.so.0", O_RDONLY) = 3
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaa9000
read(3, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\3\0\10\0\1\0\0\0\ 20\6"..., 4096) = 3292
old_mmap(NULL, 266240, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ab9b000
old_mmap(0x2ab9b000, 2120, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2ab9b000
old_mmap(0x2abdb000, 2164, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2abdb000
close(3) = 0
munmap(0x2aaa9000, 4096) = 0
open("0wÿ^?L,¬* Ì°*ìL°*.0", O_RDONLY) = 3
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaa9000
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\ 0\0\0"..., 4096) = 4096
old_mmap(NULL, 323584, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2abdc000
old_mmap(0x2abdc000, 60176, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2abdc000
old_mmap(0x2ac2a000, 3212, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2ac2a000
close(3) = 0
munmap(0x2aaa9000, 4096) = 0
open("0wÿ^?L,¬* Ì°*ìL°*o.1", O_RDONLY) = 3
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaa9000
read(3, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0 \0\0"..., 4096) = 4096
old_mmap(NULL, 462848, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ac2b000
old_mmap(0x2ac2b000, 135932, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2ac2b000
old_mmap(0x2ac8c000, 13136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2ac8c000
old_mmap(0x2ac90000, 46004, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1,
close(3) = 0
munmap(0x2aaa9000, 4096) = 0
open("/opt/lib/libssl./opt/lib/libgc.so.1", O_RDONLY) = 3
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaa9000
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\ 0\0\0"..., 4096) = 4096
old_mmap(NULL, 483328, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ac9c000
old_mmap(0x2ac9c000, 206144, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, -1, 0) = 0x2ac9c00
old_mmap(0x2ad0f000, 9752, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x33000) = 0x2ad
close(3) = 0
munmap(0x2aaa9000, 4096) = 0
open("/opt/lib/libcryp/opt/lib/libssl.so.0.9.7", O_RDONLY) = 3
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaa9000
read(3, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\3\0\10\0\1\0\0\0 \262"..., 4096) = 4096
old_mmap(NULL, 1515520, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ad12000
old_mmap(0x2ad12000, 1162492, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2ad1200
old_mmap(0x2ae6e000, 71616, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x11c000) = 0x2
old_mmap(0x2ae80000, 13472, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, 3, 0
close(3) = 0
munmap(0x2aaa9000, 4096) = 0
open("0wÿ^?L,¬* Ì°*ìL°*s.so.1", O_RDONLY) = 3
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaa9000
read(3, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0 \0\0"..., 4096) = 4096
old_mmap(NULL, 323584, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ae84000
old_mmap(0x2ae84000, 57236, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2ae84000
old_mmap(0x2aed2000, 1836, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0xe000) = 0x2aed
close(3) = 0
munmap(0x2aaa9000, 4096) = 0
open("/opt/lib/libc.so.0", O_RDONLY) = 3
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, 715821268, 0x2ae84000
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\ 0\0\0"..., 4096) = 4096
old_mmap(NULL, 942080, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aed3000
old_mmap(0x2aed3000, 650904, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, -1, 0) = 0x2aed300
old_mmap(0x2afb2000, 4728, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2afb2000
old_mmap(0x2afb4000, 19200, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1,
close(3) = 0
munmap(0x2aaa9000, 4096) = 0
ioctl(0, TIOCNXCL, {B38400 opost isig icanon echo ...}) = 0
ioctl(1, TIOCNXCL, {B38400 opost isig icanon echo ...}) = 0
getpid() = 3649
getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0
setrlimit(RLIMIT_STACK, {rlim_cur=2040*1024, rlim_max=1073741823}) = 0
rt_sigaction(SIGRT_0, {SIG_DFL}, NULL, 16) = 0
rt_sigaction(SIGRT_1, {SIG_DFL}, NULL, 16) = 0
rt_sigaction(SIGRT_2, {SIG_DFL}, NULL, 16) = 0
rt_sigprocmask(SIG_BLOCK, [RT_0], NULL, 16) = 0
rt_sigprocmask(SIG_UNBLOCK, [RT_1], NULL, 16) = 0
brk(0) = 0x100ac310
brk(0x100ad310) = 0x100ad310
brk(0x100ae000) = 0x100ae000
rt_sigaction(SIGPWR, {0x10000000, ~[RT_33 RT_34 RT_35 RT_36 RT_37 RT_38 RT_39 RT_40 RT_41 R
rt_sigaction(SIGXCPU, {0x10000000, ~[RT_33 RT_34 RT_35 RT_36 RT_37 RT_38 RT_39 RT_40 RT_41
open("/proc/stat", O_RDONLY) = 3
read(3, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0 \0\0"..., 4096) = 474
close(3) = 0
open("/proc/self/stat", O_RDONLY) = 3
read(3, " 324031900 2517\ncpu0 5517188 232"..., 4096) = 180
close(3) = 0
brk(0x100be000) = 0x100be000
brk(0x100ce000) = 0x100ce000
brk(0x100de000) = 0x100de000
--- SIGSEGV (Segmentation fault) @ 0 (0) ---
+++ killed by SIGSEGV +++
I have though of w3m because it display images in terminal and can run javascript, unfortunalety, with the modified firmware and oleg binaries :
w3m www.google.com
SIGSEGV
Any better idea ?
execve("/opt/bin/w3m", ["w3m", "www.google.com"], [/* 11 vars */]) = 0
svr4_syscall() = -1 ERRNO_4090 (Unknown error 4090)
stat("/etc/ld-opt.so.cache", 0x7fff7680) = -1 ENOENT (No such file or directory)
open("/opt/lib/libdl.so.0", O_RDONLY) = 3
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaa9000
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\10\0\1\0\0\0P\ 10\0"..., 4096) = 4096
old_mmap(NULL, 270336, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ab05000
old_mmap(0x2ab05000, 6516, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, -1, 0) = 0x2ab05000
old_mmap(0x2ab46000, 2600, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x1000) = 0x2ab4
close(3) = 0
munmap(0x2aaa9000, 4096) = 0
open("", O_RDONLY) = 3
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaa9000
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\ 0\0\0"..., 4096) = 4096
old_mmap(NULL, 344064, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ab47000
old_mmap(0x2ab47000, 54108, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2ab47000
old_mmap(0x2ab94000, 18960, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2ab94000
old_mmap(0x2ab99000, 7424, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, 3, 0x
close(3) = 0
munmap(0x2aaa9000, 4096) = 0
open("/opt/lib/libintl/opt/lib/libpthread.so.0", O_RDONLY) = 3
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaa9000
read(3, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\3\0\10\0\1\0\0\0\ 20\6"..., 4096) = 3292
old_mmap(NULL, 266240, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ab9b000
old_mmap(0x2ab9b000, 2120, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2ab9b000
old_mmap(0x2abdb000, 2164, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2abdb000
close(3) = 0
munmap(0x2aaa9000, 4096) = 0
open("0wÿ^?L,¬* Ì°*ìL°*.0", O_RDONLY) = 3
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaa9000
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\ 0\0\0"..., 4096) = 4096
old_mmap(NULL, 323584, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2abdc000
old_mmap(0x2abdc000, 60176, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2abdc000
old_mmap(0x2ac2a000, 3212, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2ac2a000
close(3) = 0
munmap(0x2aaa9000, 4096) = 0
open("0wÿ^?L,¬* Ì°*ìL°*o.1", O_RDONLY) = 3
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaa9000
read(3, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0 \0\0"..., 4096) = 4096
old_mmap(NULL, 462848, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ac2b000
old_mmap(0x2ac2b000, 135932, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2ac2b000
old_mmap(0x2ac8c000, 13136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2ac8c000
old_mmap(0x2ac90000, 46004, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1,
close(3) = 0
munmap(0x2aaa9000, 4096) = 0
open("/opt/lib/libssl./opt/lib/libgc.so.1", O_RDONLY) = 3
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaa9000
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\ 0\0\0"..., 4096) = 4096
old_mmap(NULL, 483328, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ac9c000
old_mmap(0x2ac9c000, 206144, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, -1, 0) = 0x2ac9c00
old_mmap(0x2ad0f000, 9752, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x33000) = 0x2ad
close(3) = 0
munmap(0x2aaa9000, 4096) = 0
open("/opt/lib/libcryp/opt/lib/libssl.so.0.9.7", O_RDONLY) = 3
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaa9000
read(3, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\3\0\10\0\1\0\0\0 \262"..., 4096) = 4096
old_mmap(NULL, 1515520, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ad12000
old_mmap(0x2ad12000, 1162492, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2ad1200
old_mmap(0x2ae6e000, 71616, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x11c000) = 0x2
old_mmap(0x2ae80000, 13472, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, 3, 0
close(3) = 0
munmap(0x2aaa9000, 4096) = 0
open("0wÿ^?L,¬* Ì°*ìL°*s.so.1", O_RDONLY) = 3
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaa9000
read(3, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0 \0\0"..., 4096) = 4096
old_mmap(NULL, 323584, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ae84000
old_mmap(0x2ae84000, 57236, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2ae84000
old_mmap(0x2aed2000, 1836, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0xe000) = 0x2aed
close(3) = 0
munmap(0x2aaa9000, 4096) = 0
open("/opt/lib/libc.so.0", O_RDONLY) = 3
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, 715821268, 0x2ae84000
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\ 0\0\0"..., 4096) = 4096
old_mmap(NULL, 942080, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aed3000
old_mmap(0x2aed3000, 650904, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, -1, 0) = 0x2aed300
old_mmap(0x2afb2000, 4728, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x2afb2000
old_mmap(0x2afb4000, 19200, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1,
close(3) = 0
munmap(0x2aaa9000, 4096) = 0
ioctl(0, TIOCNXCL, {B38400 opost isig icanon echo ...}) = 0
ioctl(1, TIOCNXCL, {B38400 opost isig icanon echo ...}) = 0
getpid() = 3649
getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0
setrlimit(RLIMIT_STACK, {rlim_cur=2040*1024, rlim_max=1073741823}) = 0
rt_sigaction(SIGRT_0, {SIG_DFL}, NULL, 16) = 0
rt_sigaction(SIGRT_1, {SIG_DFL}, NULL, 16) = 0
rt_sigaction(SIGRT_2, {SIG_DFL}, NULL, 16) = 0
rt_sigprocmask(SIG_BLOCK, [RT_0], NULL, 16) = 0
rt_sigprocmask(SIG_UNBLOCK, [RT_1], NULL, 16) = 0
brk(0) = 0x100ac310
brk(0x100ad310) = 0x100ad310
brk(0x100ae000) = 0x100ae000
rt_sigaction(SIGPWR, {0x10000000, ~[RT_33 RT_34 RT_35 RT_36 RT_37 RT_38 RT_39 RT_40 RT_41 R
rt_sigaction(SIGXCPU, {0x10000000, ~[RT_33 RT_34 RT_35 RT_36 RT_37 RT_38 RT_39 RT_40 RT_41
open("/proc/stat", O_RDONLY) = 3
read(3, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0 \0\0"..., 4096) = 474
close(3) = 0
open("/proc/self/stat", O_RDONLY) = 3
read(3, " 324031900 2517\ncpu0 5517188 232"..., 4096) = 180
close(3) = 0
brk(0x100be000) = 0x100be000
brk(0x100ce000) = 0x100ce000
brk(0x100de000) = 0x100de000
--- SIGSEGV (Segmentation fault) @ 0 (0) ---
+++ killed by SIGSEGV +++