API tools faq
paste
thorpedosg

Untitled

thorpedosg
Jul 24th, 2018
57
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.80 KB | None | 0 0
raw download clone embed print report diff
  1. setuid and setguid files:
  2. /sbin/unix_chkpwd
  3. /lib/uncompress.so
  4. /bin/mount
  5. /bin/ping
  6. /bin/su
  7. /bin/zcut
  8. /bin/umount
  9. /bin/ping6
  10. /usr/sbin/chroot
  11. /usr/sbin/postqueue
  12. /usr/sbin/postdrop
  13. /usr/lib/mc/cons.saver
  14. /usr/lib/pt_chown
  15. /usr/lib/eject/dmcrypt-get-device
  16. /usr/lib/squid/getpwnam_auth
  17. /usr/lib/squid/pam_auth
  18. /usr/lib/AntiVir/gui/bin/antivir_start.real
  19. /usr/lib/dbus-1.0/dbus-daemon-launch-helper
  20. /usr/lib/openssh/ssh-keysign
  21. /usr/bin/gpasswd
  22. /usr/bin/mlock
  23. /usr/bin/chage
  24. /usr/bin/ssh-agent
  25. /usr/bin/mail-lock
  26. /usr/bin/crontab
  27. /usr/bin/xterm
  28. /usr/bin/wall
  29. /usr/bin/newgrp
  30. /usr/bin/mutt_dotlock
  31. /usr/bin/expiry
  32. /usr/bin/zmuie
  33. /usr/bin/dotlockfile
  34. /usr/bin/chfn
  35. /usr/bin/maildrop
  36. /usr/bin/at
  37. /usr/bin/passwd
  38. /usr/bin/mail-touchlock
  39. /usr/bin/screen
  40. /usr/bin/bsd-write
  41. /usr/bin/lockmail.maildrop
  42. /usr/bin/mail-unlock
  43. /usr/bin/chsh
  44.  
  45. /usr/bin/file $file
  46. /sbin/unix_chkpwd: setgid ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  47. /lib/uncompress.so: setuid ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, stripped
  48. /bin/mount: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  49. /bin/ping: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  50. /bin/su: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  51. /bin/zcut: setuid setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.2.5, not stripped
  52. /bin/umount: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  53. /bin/ping6: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  54. /usr/sbin/chroot: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  55. /usr/sbin/postqueue: setgid ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped
  56. /usr/sbin/postdrop: setgid ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped
  57. /usr/lib/mc/cons.saver: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  58. /usr/lib/pt_chown: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  59. /usr/lib/eject/dmcrypt-get-device: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  60. /usr/lib/squid/getpwnam_auth: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped
  61. /usr/lib/squid/pam_auth: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped
  62. /usr/lib/AntiVir/gui/bin/antivir_start.real: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.2.5, not stripped
  63. /usr/lib/dbus-1.0/dbus-daemon-launch-helper: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), stripped
  64. /usr/lib/openssh/ssh-keysign: setuid ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped
  65. /usr/bin/gpasswd: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  66. /usr/bin/mlock: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  67. /usr/bin/chage: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  68. /usr/bin/ssh-agent: setgid ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped
  69. /usr/bin/mail-lock: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  70. /usr/bin/crontab: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped
  71. /usr/bin/xterm: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped
  72. /usr/bin/wall: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  73. /usr/bin/newgrp: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  74. /usr/bin/mutt_dotlock: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped
  75. /usr/bin/expiry: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  76. /usr/bin/zmuie: setuid setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.2.5, not stripped
  77. /usr/bin/dotlockfile: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  78. /usr/bin/chfn: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  79. /usr/bin/maildrop: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped
  80. /usr/bin/at: setuid setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  81. /usr/bin/passwd: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  82. /usr/bin/mail-touchlock: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  83. /usr/bin/screen: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped
  84. /usr/bin/bsd-write: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  85. /usr/bin/lockmail.maildrop: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped
  86. /usr/bin/mail-unlock: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  87. /usr/bin/chsh: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
  88.  
  89. dpkg -S $file:
  90. libpam-modules: /sbin/unix_chkpwd
  91. zlibc: /lib/uncompress.so
  92. mount: /bin/mount
  93. iputils-ping: /bin/ping
  94. login: /bin/su
  95. dpkg: /bin/zcut not found.
  96. mount: /bin/umount
  97. iputils-ping: /bin/ping6
  98. coreutils: /usr/sbin/chroot
  99. postfix: /usr/sbin/postqueue
  100. postfix: /usr/sbin/postdrop
  101. mc: /usr/lib/mc/cons.saver
  102. libc-bin: /usr/lib/pt_chown
  103. eject: /usr/lib/eject/dmcrypt-get-device
  104. squid: /usr/lib/squid/getpwnam_auth
  105. squid: /usr/lib/squid/pam_auth
  106. dpkg: /usr/lib/AntiVir/gui/bin/antivir_start.real not found.
  107. dbus: /usr/lib/dbus-1.0/dbus-daemon-launch-helper
  108. openssh-client: /usr/lib/openssh/ssh-keysign
  109. passwd: /usr/bin/gpasswd
  110. mlock: /usr/bin/mlock
  111. passwd: /usr/bin/chage
  112. openssh-client: /usr/bin/ssh-agent
  113. lockfile-progs: /usr/bin/mail-lock
  114. cron: /usr/bin/crontab
  115. xterm: /usr/bin/xterm
  116. bsdutils: /usr/bin/wall
  117. login: /usr/bin/newgrp
  118. mutt: /usr/bin/mutt_dotlock
  119. passwd: /usr/bin/expiry
  120. dpkg: /usr/bin/zmuie not found.
  121. liblockfile1: /usr/bin/dotlockfile
  122. passwd: /usr/bin/chfn
  123. maildrop: /usr/bin/maildrop
  124. at: /usr/bin/at
  125. passwd: /usr/bin/passwd
  126. lockfile-progs: /usr/bin/mail-touchlock
  127. screen: /usr/bin/screen
  128. bsdmainutils: /usr/bin/bsd-write
  129. maildrop: /usr/bin/lockmail.maildrop
  130. lockfile-progs: /usr/bin/mail-unlock
  131. passwd: /usr/bin/chsh
  132.  
  133. Special Note:
  134. dpkg: /bin/zcut not found.
  135. dpkg: /usr/lib/AntiVir/gui/bin/antivir_start.real not found.
  136. dpkg: /usr/bin/zmuie not found.
  137.  
  138. I'm convinced zcut and zmuie are essentially su binaries.
  139. Not sure if antivir_start is a suspect or not.
  140. Not sure how to check my kernel for bad mods either.
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!