privdayz.com speacial mini anti bypass shell

Linux centos-s-1vcpu-2gb-sgp1-01 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
nginx/1.26.1
167.99.78.96

sysc_mmap.stp

# In kernels < 2.6.33, mmap()/mmap2() was handled by arch-specific
# code.  In kernels >= 2.6.33, the arch-specific code just calls
# generic sys_mmap_pgoff().

%( kernel_v < "2.6.33" %?
# mmap
# long sys_mmap(unsigned long addr, size_t len,
#		       unsigned long prot, unsigned long flags,
#		       unsigned long fd, off_t offset)
#

@define _SYSCALL_MMAP_NAME
%(
	name = "mmap"
%)

@define _SYSCALL_MMAP_ARGSTR
%(
	argstr = sprintf("%p, %u, %s, %s, %d, %d", start, len,
	                 prot_str, flags_str, fd, offset)
%)

probe syscall.mmap = dw_syscall.mmap !, nd_syscall.mmap ? {}
probe syscall.mmap.return = dw_syscall.mmap.return !, nd_syscall.mmap.return ? {}

# dw_mmap _____________________________________________________

probe dw_syscall.mmap = kernel.function("sys_mmap") ?
{
        @_SYSCALL_MMAP_NAME
        start = $addr
        len = $len
        prot = $prot
	prot_str = _mprotect_prot_str(prot)
        flags = $flags
	flags_str = _mmap_flags(flags)
	# Although the kernel gets an unsigned long fd, on the
	# user-side it is a signed int.  Fix this.
        fd = __int32($fd)
        offset = $offset
        @_SYSCALL_MMAP_ARGSTR
}

probe dw_syscall.mmap.return = kernel.function("sys_mmap").return ?
{
        @_SYSCALL_MMAP_NAME
        @SYSC_RETVALSTR2($return)
}

# nd_mmap _____________________________________________________

probe nd_syscall.mmap = kprobe.function("sys_mmap") ?
{
	@_SYSCALL_MMAP_NAME
	asmlinkage()
	start = ulong_arg(1)
	len = ulong_arg(2)
	prot = ulong_arg(3)
	prot_str = _mprotect_prot_str(prot)
	flags = ulong_arg(4)
	flags_str = _mmap_flags(flags)
	# Although the kernel gets an unsigned long fd, on the
	# user-side it is a signed int.  Fix this.
	fd = int_arg(5)
	offset = ulong_arg(6)
	@_SYSCALL_MMAP_ARGSTR
}
probe nd_syscall.mmap.return = kprobe.function("sys_mmap").return ?
{
	@_SYSCALL_MMAP_NAME
	@SYSC_RETVALSTR2(returnval())
}
%)

System Information
*ReClick For Close
File : privdayz.com /index.php

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	root/root	0755	2023-02-17 06:21:15
..	dir	-	root/root	0755	2023-02-17 06:21:15
aux_syscalls.stp	text/x-c	4.85 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_clock_settime.stp	text/plain	1.55 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_fadvise64.stp	text/plain	5.12 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_fallocate.stp	text/plain	2.59 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_ftruncate64.stp	text/plain	1.54 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_get_mempolicy.stp	text/plain	1.79 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_lookup_dcookie.stp	text/plain	3.14 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_mbind.stp	text/plain	1.61 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_readahead.stp	text/plain	1.59 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_set_mempolicy.stp	text/plain	1.62 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_timer_gettime.stp	text/plain	1.56 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_timer_settime.stp	text/plain	1.77 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_truncate64.stp	text/plain	1.6 KB	root/root	0644	2020-10-13 04:11:23
sysc_execve.stp	text/plain	3.33 KB	root/root	0644	2020-10-13 04:11:23
sysc_ipc.stp	text/plain	1.47 KB	root/root	0644	2020-10-13 04:11:23
sysc_mmap.stp	text/plain	1.85 KB	root/root	0644	2020-10-13 04:11:23
sysc_mmap2.stp	text/plain	2.29 KB	root/root	0644	2020-10-13 04:11:23
sysc_ppc32_timer_create.stp	text/plain	1.65 KB	root/root	0644	2020-10-13 04:11:23
sysc_ppc64_newuname.stp	text/plain	1.58 KB	root/root	0644	2020-10-13 04:11:23
sysc_ppc64_personality.stp	text/plain	2.2 KB	root/root	0644	2020-10-13 04:11:23
sysc_ppc64_sys32_stime.stp	text/plain	1.36 KB	root/root	0644	2020-10-13 04:11:23
sysc_ppc64_sys_stime.stp	text/plain	1.33 KB	root/root	0644	2020-10-13 04:11:23
sysc_ppc_rtas.stp	text/plain	1.13 KB	root/root	0644	2020-10-13 04:11:23
sysc_sigaltstack.stp	text/plain	3.37 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_adjtimex.stp	text/plain	1.27 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_getdents.stp	text/plain	1.44 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_ptrace.stp	text/plain	1.4 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_rt_sigpending.stp	text/plain	1.52 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_rt_sigqueueinfo.stp	text/plain	1.65 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_rt_sigtimedwait.stp	text/plain	1.81 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_sched_rr_get_interval.stp	text/plain	1.75 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_sched_setparam.stp	text/plain	1.53 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_sendfile64.stp	text/plain	1.54 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_sigreturn.stp	text/plain	1.53 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_swapcontext.stp	text/plain	1.78 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_sysinfo.stp	text/plain	1.28 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_utimes.stp	text/plain	1.39 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys64_time.stp	text/plain	1.1 KB	root/root	0644	2020-10-13 04:11:23
sysc_sysctl32.stp	text/plain	2.3 KB	root/root	0644	2020-10-13 04:11:23
syscall_num.stp	text/plain	56.76 KB	root/root	0644	2020-10-13 04:11:23