API tools faq
paste
View difference between Paste ID: FNXuGwB3 and 7sVTuGCM
SHOW: | | - or go back to the newest paste.
1
setuid and setguid files:
2
/sbin/unix_chkpwd
3
/lib/uncompress.so
4
/bin/mount
5
/bin/ping
6
/bin/su
7
/bin/zcut
8
/bin/umount
9
/bin/ping6
10
/usr/sbin/chroot
11
/usr/sbin/postqueue
12
/usr/sbin/postdrop
13
/usr/lib/mc/cons.saver
14
/usr/lib/pt_chown
15
/usr/lib/eject/dmcrypt-get-device
16
/usr/lib/squid/getpwnam_auth
17
/usr/lib/squid/pam_auth
18
/usr/lib/AntiVir/gui/bin/antivir_start.real
19
/usr/lib/dbus-1.0/dbus-daemon-launch-helper
20
/usr/lib/openssh/ssh-keysign
21
/usr/bin/gpasswd
22
/usr/bin/mlock
23
/usr/bin/chage
24
/usr/bin/ssh-agent
25
/usr/bin/mail-lock
26
/usr/bin/crontab
27
/usr/bin/xterm
28
/usr/bin/wall
29
/usr/bin/newgrp
30
/usr/bin/mutt_dotlock
31
/usr/bin/expiry
32
/usr/bin/zmuie
33
/usr/bin/dotlockfile
34
/usr/bin/chfn
35
/usr/bin/maildrop
36
/usr/bin/at
37
/usr/bin/passwd
38
/usr/bin/mail-touchlock
39
/usr/bin/screen
40
/usr/bin/bsd-write
41
/usr/bin/lockmail.maildrop
42
/usr/bin/mail-unlock
43
/usr/bin/chsh
44
45
/usr/bin/file $file

46
/sbin/unix_chkpwd: setgid ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

47
/lib/uncompress.so: setuid ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, stripped

48
/bin/mount: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

49
/bin/ping: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

50
/bin/su: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

51
/bin/zcut: setuid setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.2.5, not stripped

52
/bin/umount: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

53
/bin/ping6: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

54
/usr/sbin/chroot: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

55
/usr/sbin/postqueue: setgid ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped

56
/usr/sbin/postdrop: setgid ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped

57
/usr/lib/mc/cons.saver: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

58
/usr/lib/pt_chown: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

59
/usr/lib/eject/dmcrypt-get-device: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

60
/usr/lib/squid/getpwnam_auth: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped

61
/usr/lib/squid/pam_auth: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped

62
/usr/lib/AntiVir/gui/bin/antivir_start.real: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.2.5, not stripped

63
/usr/lib/dbus-1.0/dbus-daemon-launch-helper: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), stripped

64
/usr/lib/openssh/ssh-keysign: setuid ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped

65
/usr/bin/gpasswd: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

66
/usr/bin/mlock: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

67
/usr/bin/chage: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

68
/usr/bin/ssh-agent: setgid ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped

69
/usr/bin/mail-lock: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

70
/usr/bin/crontab: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped

71
/usr/bin/xterm: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped

72
/usr/bin/wall: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

73
/usr/bin/newgrp: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

74
/usr/bin/mutt_dotlock: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped

75
/usr/bin/expiry: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

76
/usr/bin/zmuie: setuid setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.2.5, not stripped

77
/usr/bin/dotlockfile: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

78
/usr/bin/chfn: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

79
/usr/bin/maildrop: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped

80
/usr/bin/at: setuid setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

81
/usr/bin/passwd: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

82
/usr/bin/mail-touchlock: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

83
/usr/bin/screen: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped

84
/usr/bin/bsd-write: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

85
/usr/bin/lockmail.maildrop: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.8, stripped

86
/usr/bin/mail-unlock: setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

87
/usr/bin/chsh: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped

88
89
dpkg -S $file:

90
libpam-modules: /sbin/unix_chkpwd

91
zlibc: /lib/uncompress.so

92
mount: /bin/mount

93
iputils-ping: /bin/ping

94
login: /bin/su

95
dpkg: /bin/zcut not found.

96
mount: /bin/umount

97
iputils-ping: /bin/ping6

98
coreutils: /usr/sbin/chroot

99
postfix: /usr/sbin/postqueue

100
postfix: /usr/sbin/postdrop

101
mc: /usr/lib/mc/cons.saver

102
libc-bin: /usr/lib/pt_chown

103
eject: /usr/lib/eject/dmcrypt-get-device

104
squid: /usr/lib/squid/getpwnam_auth

105
squid: /usr/lib/squid/pam_auth

106
dpkg: /usr/lib/AntiVir/gui/bin/antivir_start.real not found.

107
dbus: /usr/lib/dbus-1.0/dbus-daemon-launch-helper

108
openssh-client: /usr/lib/openssh/ssh-keysign

109
passwd: /usr/bin/gpasswd

110
mlock: /usr/bin/mlock

111
passwd: /usr/bin/chage

112
openssh-client: /usr/bin/ssh-agent

113
lockfile-progs: /usr/bin/mail-lock

114
cron: /usr/bin/crontab

115
xterm: /usr/bin/xterm

116
bsdutils: /usr/bin/wall

117
login: /usr/bin/newgrp

118
mutt: /usr/bin/mutt_dotlock

119
passwd: /usr/bin/expiry

120
dpkg: /usr/bin/zmuie not found.

121
liblockfile1: /usr/bin/dotlockfile

122
passwd: /usr/bin/chfn

123
maildrop: /usr/bin/maildrop

124
at: /usr/bin/at

125
passwd: /usr/bin/passwd

126
lockfile-progs: /usr/bin/mail-touchlock

127
screen: /usr/bin/screen

128
bsdmainutils: /usr/bin/bsd-write

129
maildrop: /usr/bin/lockmail.maildrop

130
lockfile-progs: /usr/bin/mail-unlock

131
passwd: /usr/bin/chsh

132
133
Special Note:

134
dpkg: /bin/zcut not found.

135
dpkg: /usr/lib/AntiVir/gui/bin/antivir_start.real not found.

136
dpkg: /usr/bin/zmuie not found.

137
138
I'm convinced zcut and zmuie are essentially su binaries.

139
Not sure if antivir_start is a suspect or not.

140
Not sure how to check my kernel for bad mods either.
        

    


            


                                


        

            



                
    

        Public Pastes
    

    
            

    

                    

        

    





    


    
    
    
    
    
    
    
    




    


    



                

            We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.             OK, I Understand
        

    
                

            

                
                    
                
            

            

                Not a member of Pastebin yet?

                Sign Up, it unlocks many cool features!