inject failure
whyseu opened this issue · 5 comments
whyseu commented
I use the inject tool, but fail to inject the test file.
elfmaster commented
After you inject it, run 'cp libevil.so /lib/x86_64-linux-gnu/; ldconfig'
This way the dynamic linker can find the shared library. :)
…On Sat, Oct 17, 2020 at 7:49 PM whyseu ***@***.***> wrote:
I use the inject tool, but fail to inject the test file.
[image: 微信图片_20201018104547]
<https://user-images.githubusercontent.com/35478590/96357510-89533980-112f-11eb-9158-b98a6d38ef58.jpg>
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
<#3>, or unsubscribe
<https://github.com/notifications/unsubscribe-auth/ABMVMIFPBQRQ6YFP4EXLJ73SLJJS7ANCNFSM4SUYXENA>
.
whyseu commented
Thank you! But I inject the test file, it does not change the output.
elfmaster commented
Isn't there a file created called ./keylogger.txt? it should have logged
the input you typed.
…-Ryan
On Mon, Oct 19, 2020 at 6:20 PM whyseu ***@***.***> wrote:
Thank you! But I inject the test file, it does not change the output.
[image: 无标题]
<https://user-images.githubusercontent.com/35478590/96528504-82eeca00-12b5-11eb-84a7-430967ce76de.png>
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
<#3 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/ABMVMIFRI4VGYXPLSBNX72DSLTQXPANCNFSM4SUYXENA>
.
elfmaster commented
Oh so yeah to clarify, the program you are injecting into is designed to
have liblogger.so injected into it.
You can inject evil.so into something that uses puts() since that's what
its hijacking.
Do ./inject ./liblogger.so <target>; sudo cp liblogger.so <library_path>;
sudo ldconfig;
then run <target> (aka test)
…On Tue, Oct 20, 2020 at 12:53 PM ryan oneill ***@***.***> wrote:
Isn't there a file created called ./keylogger.txt? it should have logged
the input you typed.
-Ryan
On Mon, Oct 19, 2020 at 6:20 PM whyseu ***@***.***> wrote:
> Thank you! But I inject the test file, it does not change the output.
> [image: 无标题]
> <https://user-images.githubusercontent.com/35478590/96528504-82eeca00-12b5-11eb-84a7-430967ce76de.png>
>
> —
> You are receiving this because you commented.
> Reply to this email directly, view it on GitHub
> <#3 (comment)>,
> or unsubscribe
> <https://github.com/notifications/unsubscribe-auth/ABMVMIFRI4VGYXPLSBNX72DSLTQXPANCNFSM4SUYXENA>
> .
>
whyseu commented
Thank you~