search

jcadduono / android_external_dirtycow

CVE-2016-5195 (dirtycow/dirtyc0w) - recowvery fork
https://build.nethunter.com/android-tools/dirtycow/
146 stars 37 forks source link

what am I doing wrong here? #13

Open sopmodz opened 7 years ago

sopmodz commented 7 years ago

PS C:\adb> PS C:\adb> adb push dirtycow /data/local/tmp 228 KB/s (3663 bytes in 0.015s) PS C:\adb> PS C:\adb> adb push recowvery-applypatch /data/local/tmp 9 KB/s (9504 bytes in 1.000s) PS C:\adb> PS C:\adb> adb push recowvery-app_process64 /data/local/tmp 146 KB/s (2349 bytes in 0.015s) PS C:\adb> PS C:\adb> adb push recowvery-run-as /data/local/tmp 3 KB/s (3673 bytes in 1.000s) PS C:\adb> PS C:\adb> adb shell elsa:/ $ elsa:/ $ cd /data/local/tmp elsa:/data/local/tmp $ elsa:/data/local/tmp $ chmod 0777 * elsa:/data/local/tmp $ elsa:/data/local/tmp $ ./dirtycow /system/bin/applypatch recowvery-applypatch ./dirtycow[28]: struct: not found ./dirtycow[29]: unsigned: not found ./dirtycow[30]: unsigned: not found ./dirtycow[31]: unsigned: not found ./dirtycow[32]: size_t: not found ./dirtycow[33]: int: not found ./dirtycow[34]: syntax error: '}' unexpected 1|elsa:/data/local/tmp $

jcadduono commented 7 years ago

Your phone's not a compiler, you need to compile the files in this repository not run them see the readme

sopmodz commented 7 years ago

elsa:/data/local/tmp $ run-as exec ./recowvery-applypatch boot run-as: Package 'exec' is unknown

jcadduono commented 7 years ago

that means dirtycow did not succeed on run-as

sopmodz commented 7 years ago

why would it not succeed?

jcadduono commented 7 years ago

Need some older ROM, the vulnerability was patched in like November 2016

Sinterso commented 5 years ago

Your phone's not a compiler, you need to compile the files in this repository not run them see the readme

Sorry for necro-bumping, but to someone who's got no real experience with this stuff, how do I compile them first? As for the no real experience part, I've googled this stuff for about an hour. Everything up to this point was painless.

Do you mean the building part? I'm not sure what "lunch your-device-eng" means, and the Windows Powershell doesn't recognize "make" as a valid command.