[*] Binary protection state of telnetd
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function strcpy tear down of telnetd
lui a0, 0x40
addiu a0, a0, 0x1fd0
jalr t9
addiu a1, zero, 2
lw gp, 0x10(sp)
blez v0, 0x400d7c
move s0, v0
lw t9, -sym.imp.grantpt(gp)
nop
jalr t9
move a0, v0
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.unlockpt(gp)
nop
jalr t9
move a0, s0
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.ptsname(gp)
nop
jalr t9
move a0, s0
lw gp, 0x10(sp)
lui a0, 0x41
lw t9, -sym.imp.strcpy(gp)
addiu a0, a0, 0x22a4
jalr t9
move a1, v0
lui v1, 0x41
lw v0, 0x22c4(v1)
lw gp, 0x10(sp)
slt v0, v0, s0
bnez v0, 0x400da0
nop
b 0x400da4
nop
lw v0, -0x7f70(gp)
lw t9, -sym.imp.fputs(gp)
lw a1, (v0)
lui a0, 0x40
jalr t9
addiu a0, a0, 0x1fdc
lw gp, 0x10(sp)
b 0x401044
sw zero, 0x50(sp)
[*] Function strcpy used 1 times telnetd