Skip to content

Instantly share code, notes, and snippets.

@DanielG
Last active August 29, 2015 14:02
Show Gist options
  • Save DanielG/78df4760d12d53715405 to your computer and use it in GitHub Desktop.
Save DanielG/78df4760d12d53715405 to your computer and use it in GitHub Desktop.
Warning: Permanently added '[localhost]:2022' (RSA) to the list of known hosts.
execve("/usr/bin/ruby", ["ruby", "/root/test.rb"], [/* 3 vars */]) = 0
brk(0) = 0x8ec000
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7e5d9dd000
access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=7983, ...}) = 0
mmap(NULL, 7983, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f7e5d9db000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/usr/lib/libruby1.8.so.1.8", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\211\1\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=944800, ...}) = 0
mmap(NULL, 3164288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7e5d4b8000
mprotect(0x7f7e5d59b000, 2093056, PROT_NONE) = 0
mmap(0x7f7e5d79a000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe2000) = 0x7f7e5d79a000
mmap(0x7f7e5d79f000, 120960, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f7e5d79f000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\30\2\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=1815224, ...}) = 0
mmap(NULL, 3929304, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7e5d0f8000
mprotect(0x7f7e5d2ad000, 2097152, PROT_NONE) = 0
mmap(0x7f7e5d4ad000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1b5000) = 0x7f7e5d4ad000
mmap(0x7f7e5d4b3000, 17624, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f7e5d4b3000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libpthread.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200l\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=135366, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7e5d9da000
mmap(NULL, 2212904, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7e5cedb000
mprotect(0x7f7e5cef3000, 2093056, PROT_NONE) = 0
mmap(0x7f7e5d0f2000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17000) = 0x7f7e5d0f2000
mmap(0x7f7e5d0f4000, 13352, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f7e5d0f4000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/librt.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340!\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=31752, ...}) = 0
mmap(NULL, 2128984, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7e5ccd3000
mprotect(0x7f7e5ccda000, 2093056, PROT_NONE) = 0
mmap(0x7f7e5ced9000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f7e5ced9000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libdl.so.2", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\r\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=14768, ...}) = 0
mmap(NULL, 2109704, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7e5cacf000
mprotect(0x7f7e5cad1000, 2097152, PROT_NONE) = 0
mmap(0x7f7e5ccd1000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f7e5ccd1000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libcrypt.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\n\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=43288, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7e5d9d9000
mmap(NULL, 2327040, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7e5c896000
mprotect(0x7f7e5c89f000, 2097152, PROT_NONE) = 0
mmap(0x7f7e5ca9f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9000) = 0x7f7e5ca9f000
mmap(0x7f7e5caa1000, 184832, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f7e5caa1000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libm.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0pU\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=1030512, ...}) = 0
mmap(NULL, 3125544, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7e5c59a000
mprotect(0x7f7e5c695000, 2093056, PROT_NONE) = 0
mmap(0x7f7e5c894000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xfa000) = 0x7f7e5c894000
close(3) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7e5d9d8000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7e5d9d7000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7e5d9d6000
arch_prctl(ARCH_SET_FS, 0x7f7e5d9d7700) = 0
mprotect(0x7f7e5d4ad000, 16384, PROT_READ) = 0
mprotect(0x7f7e5c894000, 4096, PROT_READ) = 0
mprotect(0x7f7e5ca9f000, 4096, PROT_READ) = 0
mprotect(0x7f7e5ccd1000, 4096, PROT_READ) = 0
mprotect(0x7f7e5d0f2000, 4096, PROT_READ) = 0
mprotect(0x7f7e5ced9000, 4096, PROT_READ) = 0
mprotect(0x7f7e5d79a000, 8192, PROT_READ) = 0
mprotect(0x600000, 4096, PROT_READ) = 0
mprotect(0x7f7e5d9df000, 4096, PROT_READ) = 0
munmap(0x7f7e5d9db000, 7983) = 0
set_tid_address(0x7f7e5d9d79d0) = 7
set_robust_list(0x7f7e5d9d79e0, 0x18) = 0
futex(0x7fffc231280c, FUTEX_WAIT_BITSET_PRIVATE|FUTEX_CLOCK_REALTIME, 1, NULL, 7f7e5d9d7700) = -1 EAGAIN (Resource temporarily unavailable)
rt_sigaction(SIGRTMIN, {0x7f7e5cee1750, [], SA_RESTORER|SA_SIGINFO, 0x7f7e5ceeacb0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {0x7f7e5cee17e0, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x7f7e5ceeacb0}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0
getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0
brk(0) = 0x8ec000
brk(0x90d000) = 0x90d000
mmap(NULL, 401408, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7e5d974000
open("/dev/urandom", O_RDONLY|O_NOCTTY|O_NONBLOCK|O_NOFOLLOW) = 3
fstat(3, {st_mode=S_IFCHR|0666, st_rdev=makedev(1, 9), ...}) = 0
read(3, " *\274Pe\254\272\\v\364V\264\313]1\3730R;l\242\313\377DG\247/\244\24\225\21\324", 32) = 32
close(3) = 0
brk(0x92e000) = 0x92e000
brk(0x94f000) = 0x94f000
rt_sigaction(SIGINT, {0x7f7e5d54dbc0, [], SA_RESTORER, 0x7f7e5d12e4a0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGHUP, {0x7f7e5d54dbc0, [], SA_RESTORER, 0x7f7e5d12e4a0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGQUIT, {0x7f7e5d54dbc0, [], SA_RESTORER, 0x7f7e5d12e4a0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGTERM, {0x7f7e5d54dbc0, [], SA_RESTORER, 0x7f7e5d12e4a0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGALRM, {0x7f7e5d54dbc0, [], SA_RESTORER, 0x7f7e5d12e4a0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGUSR1, {0x7f7e5d54dbc0, [], SA_RESTORER, 0x7f7e5d12e4a0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGUSR2, {0x7f7e5d54dbc0, [], SA_RESTORER, 0x7f7e5d12e4a0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGBUS, {0x7f7e5d54d670, [], SA_RESTORER, 0x7f7e5d12e4a0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGSEGV, {0x7f7e5d54db10, [], SA_RESTORER, 0x7f7e5d12e4a0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGPIPE, {0x7f7e5d54d4b0, [], SA_RESTORER, 0x7f7e5d12e4a0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigprocmask(SIG_BLOCK, ~[RTMIN RT_1], [], 8) = 0
rt_sigaction(SIGCHLD, {SIG_DFL, [], SA_RESTORER, 0x7f7e5d12e4a0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
geteuid() = 0
getegid() = 0
getuid() = 0
geteuid() = 0
getgid() = 0
getegid() = 0
open("/root/test.rb", O_RDONLY) = 3
close(3) = 0
open("/root/test.rb", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=47, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7e5d9dc000
read(3, "#!/usr/bin/env ruby\n$stderr.writ"..., 4096) = 47
read(3, "", 4096) = 0
close(3) = 0
munmap(0x7f7e5d9dc000, 4096) = 0
fstat(0, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0
fstat(0, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7e5d9dc000
read(0, "hello world\n", 4096) = 12
read(0, "", 4096) = 0
write(2, "hello world\n", 12hello world
) = 12
rt_sigaction(SIGINT, {SIG_DFL, [INT], SA_RESTORER|SA_RESTART, 0x7f7e5d12e4a0}, {0x7f7e5d54dbc0, [], SA_RESTORER, 0x7f7e5d12e4a0}, 8) = 0
exit_group(0) = ?
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment