⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.144
Server IP:
157.245.143.252
Server:
Linux www 6.11.0-9-generic #9-Ubuntu SMP PREEMPT_DYNAMIC Mon Oct 14 13:19:59 UTC 2024 x86_64
Server Software:
nginx/1.26.0
PHP Version:
8.3.11
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
usr
/
lib
/
x86_64-linux-gnu
/
rsyslog
/
View File Name :
pmsnare.so
ELF > @ E @ 8 @ q q 0 0 0 P= PM PM `= `M `M Std Ptd 5 5 5 Qtd Rtd P= PM PM GNU GNU 30_/ G )bq" h ~FDO {"type":"deb","os":"ubuntu","name":"rsyslog","version":"8.2406.0-1ubuntu2.1","architecture":"amd64"} Ys U Z m f z s , F " __gmon_start__ _ITM_deregisterTMCloneTable _ITM_registerTMCloneTable __cxa_finalize free r_dbgprintf strcmp Debug malloc nvlstGetParams cnfparamvalsDestruct es_str2cstr cnfparamsPrint calloc strlen strncasecmp memmove modInit loadConf __stack_chk_fail libc.so.6 pmsnare.so GLIBC_2.4 GLIBC_2.2.5 ii ui PM XM P P P S P2 S 1 S 2 S (2 S S O O O O O O hO pO xO O O O O O O O O O O HH? HtH 52? %4? @ h f h f h f h f h f h f h f h rf h bf h Rf h Bf h 2f h "f %> f D %N> f D %F> f D %>> f D %6> f D %.> f D %&> f D % > f D %> f D %> f D %> f D %= f D %= f D %= f D H= B HB H9tH= Ht H=A H5A H)HH?HHHtH= Htf D =A u+UH== Ht H== dmA ] w 1 1 H5 H1ff. @ H# H1ff. @ %-ff. 1f 1f 1f UH D> 1H5 HSH HH= H1H = H5 = H1H ~< H5 = H]1f HH1ff. @ UHAUATISHL- @ I] Ht ff. HH[ HuLMtLH1[A\A]]ff. f UH1H5' HSHH= HHtHH]1 Hw UHAVAUATISH H L-s HLu7HxI$LH HZI$1[A\A]A^] H5. HY L5 HL?W H5 H( H5 H H5 H H5 H H5 H H5 H H5 H. H5 HuSH, H56 HL55 Zu&HI$f D H @ LH%t)H5 Hu>HGI$f D H!I$r H < @ H5 Ht=H5 HuJHI$$f. H @ Hi I$H @ H5 HQu7H I$ D H H~H5i Hu HI$}HOH5 Hu H=I$NH- H5 HuH.I$ I<$ 1HH5 H=" "Hf D UHAWAVIAUATSHL%7 HuA$a ( 7HH H@ H; HS HPHc HZ HXHCC M 1H5*; LHEH A$ E1f= ; LmL= u#g IE : IID9~FA} tLLHH: L L;tH5 L(u<IE C H}H5}: hHEE1HHD[A\A]A^A_] @ H5 LueIE CWf H5: H=] 1[f D H': HtCf fHnfl fH5I Lau=I} 12 C MtH59 1AH#LH5 H= 1 H5 H= 1HuH=P9 +=f D H599 1A] f. UHATI SH HtH9 1L H[A\]úff. U1H5 HAVAUL- ATLSH8 HH L5W U D C LcC\t AD$ ff. LLLLC1H[ H ;uHL8 H8c7 {uH48 H8{7 C{uH8 H8r7 C{ uH8 H86 C t S=C LcC QC C011 LcC9f [1A\A]A^] D U1HAWIH5b AVIAUL- ATLSHIc_LEg\1H5l LA)I_pHDgA ff. f< t< tAV9t HAuEVINE9~&IcHHDUHMHMDUą IcWLAG\Iwp)LLuj fI[ A9 uD`IY1DIEH5 LA : H5 H E H5 H H[A\A]A^A_] D H5 LAAVHM1IEH5 L"Ic~ H53 HH}H}ȅp H5 ixH5 LAVHI+GpL IcFH{MA)H4McL3BD# AFMȃA)G\AFA)G`A+NAQ E1DH5s L1a @ H5i L1GfH5 L1I+_pC Eg\HcI_p H{A)IcFA)H4IcHUHUD AFA)G\AFA)G`H0 ]IcOLDIOpLH5Y 1<H5 LI+_pC `H5+ L{AVHI+GpL A UH= HAVIAUHuIATSHdL$%( LeIщÅ M M HEH H=0 ЉÅ A H53 H= AԉÅ L% H .1 1H5 L0 ÅufH 0 1H5 L0 ÅuGH p/ 1H5s Lf0 Åu(H/ ukH. H82 ff. HIE HEdH+%( uSH[A\A]A^] f ۸D @ H8 H5 L1x HH rsyslog.snare pmsnare glbl pmsnare.c parser datetime modExit modGetID getType getKeepType beginCnfLoad endCnfLoad checkCnf activateCnf freeCnf getModCnfName setModCnf parse2 GetParserName newParserInst freeParserInst isCompatibleWithFeature newParserInst (pmsnare) pmsnare: parser param blk: pmsnare: Begin endCnfLoad MSWinEventLog LinuxKAudit objGetObjInterface regCfSysLineHdlr 8.2406.0 pmsnare: free parser instance %p entry point '%s' not present in module parser.escapecontrolcharactersonreceive parser.escapecontrolcharactertab parser.escapecontrolcharacterscstyle parser.controlcharacterescapeprefix pmsnare: program error, non-handled param '%s' pmsnare: Snare parser will treat '%s' as tab. Message will now be parsed by fix Snare parser. pmsnare: msg to look at: [%d]'%s' pmsnare: Message is too short to be Snare! pmsnare: tab separated message pmsnare: tab [%d]'%s' msg at the first separator: [%d]'%s' Found a non-syslog Windows Snare message. Found a non-syslog Linux Snare message. pmsnare: tab [%d]'%s' msg after the timestamp and hostname: [%d]'%s' Found a syslog Windows Snare message. pmsnare: Found a syslog Linux Snare message. pmsnare: new message: [%d]'%s' snare parser init called, compiled with version %s ; $ 8 L ` t $ 4 4$ tD | D 0 zR x $ 0 FJ w ?9*3$" D \ t X T P \ h t p l hg ES AM 8 $ L c EC DHN t = EO Ag 4 ( NC FDY D , EC DLK E $ B EC BIg A ( $ K EL DM( , P <h EE BLEQ< F , | EJ BIJ$ H P d! PM XM o h ( PO 8 ` P o o o o o `M 0 @ P ` p P P2 1 2 (2 S /usr/lib/debug/.dwz/x86_64-linux-gnu/rsyslog.debug O Rg RB 0330b35f2f1d18470dc9e12962df71221816d4.debug 6'} .shstrtab .note.gnu.property .note.gnu.build-id .note.package .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt.got .plt.sec .text .fini .rodata .eh_frame_hdr .eh_frame .init_array .fini_array .dynamic .data .bss .gnu_debugaltlink .gnu_debuglink $ 1 x ? o h h $ I Q ( Y o * f o 0 u P B ` ` 8 d! d! 2 0 0 5 5 5 5 PM P= XM X= `M `= PO P? P @ S C C G 8D 4 lD