privdayz.com speacial mini anti bypass shell

Linux centos-s-1vcpu-2gb-sgp1-01 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
nginx/1.26.1
167.99.78.96

File Name : sysc_sys32_swapcontext.stp

# sys32_swapcontext ________________________________________
#
# long sys32_swapcontext(struct ucontext32 __user *old_ctx,
#			struct ucontext32 __user *new_ctx,
#			int ctx_size, int r6, int r7, int r8,
#			struct pt_regs *regs)
#

@define _SYSCALL_SYS32_SWAPCONTEXT_NAME
%(
	name = "sys32_swapcontext"
%)

@define _SYSCALL_SYS32_SWAPCONTEXT_ARGSTR
%(
	argstr = sprintf("%p, %p, %d, %d, %d, %d, %p",
	                 old_ctx_uaddr, new_ctx_uaddr, r5, r6, r7, r8, regs)
%)

probe syscall.sys32_swapcontext = dw_syscall.sys32_swapcontext !,
                                  nd_syscall.sys32_swapcontext ? {}
probe syscall.sys32_swapcontext.return = dw_syscall.sys32_swapcontext.return !,
                                         nd_syscall.sys32_swapcontext.return ? {}

# dw_sys32_swapcontext _____________________________________________________

probe dw_syscall.sys32_swapcontext = kernel.function("sys32_swapcontext") ?
{
	@_SYSCALL_SYS32_SWAPCONTEXT_NAME
	old_ctx_uaddr = $old_ctx
	new_ctx_uaddr = $new_ctx
	r5 = $ctx_size
	r6 = $r6
	r7 = $r7
	r8 = $r8
	regs = $regs
	@_SYSCALL_SYS32_SWAPCONTEXT_ARGSTR
}
probe dw_syscall.sys32_swapcontext.return = kernel.function("sys32_swapcontext").return ?
{
	@_SYSCALL_SYS32_SWAPCONTEXT_NAME
	@SYSC_RETVALSTR($return)
}

# nd_sys32_swapcontext _____________________________________________________

probe nd_syscall.sys32_swapcontext = kprobe.function("sys32_swapcontext") ?
{
	@_SYSCALL_SYS32_SWAPCONTEXT_NAME
	asmlinkage()
	old_ctx_uaddr = pointer_arg(1)
	new_ctx_uaddr = pointer_arg(2)
	r5 = int_arg(3)
	r6 = int_arg(4)
	r7 = int_arg(5)
	r8 = int_arg(6)
	regs = pointer_arg(7)
	@_SYSCALL_SYS32_SWAPCONTEXT_ARGSTR
}
probe nd_syscall.sys32_swapcontext.return = kprobe.function("sys32_swapcontext").return ?
{
	@_SYSCALL_SYS32_SWAPCONTEXT_NAME
	@SYSC_RETVALSTR(returnval())
}

System Information
*ReClick For Close
File : privdayz.com /index.php

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	root/root	0755	2023-02-17 06:21:15
..	dir	-	root/root	0755	2023-02-17 06:21:15
aux_syscalls.stp	text/x-c	4.85 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_clock_settime.stp	text/plain	1.55 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_fadvise64.stp	text/plain	5.12 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_fallocate.stp	text/plain	2.59 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_ftruncate64.stp	text/plain	1.54 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_get_mempolicy.stp	text/plain	1.79 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_lookup_dcookie.stp	text/plain	3.14 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_mbind.stp	text/plain	1.61 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_readahead.stp	text/plain	1.59 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_set_mempolicy.stp	text/plain	1.62 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_timer_gettime.stp	text/plain	1.56 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_timer_settime.stp	text/plain	1.77 KB	root/root	0644	2020-10-13 04:11:23
sysc_compat_truncate64.stp	text/plain	1.6 KB	root/root	0644	2020-10-13 04:11:23
sysc_execve.stp	text/plain	3.33 KB	root/root	0644	2020-10-13 04:11:23
sysc_ipc.stp	text/plain	1.47 KB	root/root	0644	2020-10-13 04:11:23
sysc_mmap.stp	text/plain	1.85 KB	root/root	0644	2020-10-13 04:11:23
sysc_mmap2.stp	text/plain	2.29 KB	root/root	0644	2020-10-13 04:11:23
sysc_ppc32_timer_create.stp	text/plain	1.65 KB	root/root	0644	2020-10-13 04:11:23
sysc_ppc64_newuname.stp	text/plain	1.58 KB	root/root	0644	2020-10-13 04:11:23
sysc_ppc64_personality.stp	text/plain	2.2 KB	root/root	0644	2020-10-13 04:11:23
sysc_ppc64_sys32_stime.stp	text/plain	1.36 KB	root/root	0644	2020-10-13 04:11:23
sysc_ppc64_sys_stime.stp	text/plain	1.33 KB	root/root	0644	2020-10-13 04:11:23
sysc_ppc_rtas.stp	text/plain	1.13 KB	root/root	0644	2020-10-13 04:11:23
sysc_sigaltstack.stp	text/plain	3.37 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_adjtimex.stp	text/plain	1.27 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_getdents.stp	text/plain	1.44 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_ptrace.stp	text/plain	1.4 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_rt_sigpending.stp	text/plain	1.52 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_rt_sigqueueinfo.stp	text/plain	1.65 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_rt_sigtimedwait.stp	text/plain	1.81 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_sched_rr_get_interval.stp	text/plain	1.75 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_sched_setparam.stp	text/plain	1.53 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_sendfile64.stp	text/plain	1.54 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_sigreturn.stp	text/plain	1.53 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_swapcontext.stp	text/plain	1.78 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_sysinfo.stp	text/plain	1.28 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys32_utimes.stp	text/plain	1.39 KB	root/root	0644	2020-10-13 04:11:23
sysc_sys64_time.stp	text/plain	1.1 KB	root/root	0644	2020-10-13 04:11:23
sysc_sysctl32.stp	text/plain	2.3 KB	root/root	0644	2020-10-13 04:11:23
syscall_num.stp	text/plain	56.76 KB	root/root	0644	2020-10-13 04:11:23