⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.30
Server IP:
45.79.8.107
Server:
Linux localhost 5.15.0-140-generic #150-Ubuntu SMP Sat Apr 12 06:00:09 UTC 2025 x86_64
Server Software:
nginx/1.18.0
PHP Version:
8.1.2-1ubuntu2.21
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
lib
/
x86_64-linux-gnu
/
rsyslog
/
View File Name :
pmsnare.so
ELF > @ XE @ 8 @ 0 0 0 X= XM XM x h= hM hM $ $ Std Ptd 5 5 5 Qtd Rtd X= XM XM GNU GNU =$ { Ys U Z m f z s , F " P __gmon_start__ _ITM_deregisterTMCloneTable _ITM_registerTMCloneTable __cxa_finalize free r_dbgprintf strcmp Debug malloc nvlstGetParams cnfparamvalsDestruct es_str2cstr cnfparamsPrint calloc strlen strncasecmp memmove modInit __stack_chk_fail libc.so.6 pmsnare.so GLIBC_2.4 GLIBC_2.2.5 ii ui XM `M P P P S P2 S 1 S 2 S (2 S S O O O O O pO xO O O O O O O O O O O O HH? HtH 5:? %;? h h h h h h h h q h a h Q h A h 1 h ! %> D %U> D %M> D %E> D %=> D %5> D %-> D %%> D % > D %> D % > D %> D %= D %= D H=A HA H9tH= Ht H=A H5A H)HH?HHHtH= Htf D =uA u+UH== Ht H== dMA ] w 1 1 H5 H1ff. @ H# H1ff. @ %-ff. 1f 1f 1f UH- 1H ;> HH5 = H1H = H5 = H1H < H5 = 1] D HH1ff. @ ATL%@ UHSI $Ht D HH[ HuLHtH[1]A\ UHH1H5T H= HtH1]ff. @ Hs AUATUSHHH H H- IHu8HHHL HH1H[]A\A] @ H5^ L L-P LLoW H5> LX H53 LA H5) L* H5 L H5 L H5 L H5 L* H5 LuSH\ H5f LL-e u&HH H @ LLUt)H5( LBu>HwH HQHpf H9; @ H50 Lt5H5$ LuJH#H" H @ H1 H f H @ H5 Lu7H Hf D H H }H5 L7uHH{HOH50 L uHnHMHO!H5L LuH`H H; 1LH5 H=V VHf. AWAVAUATIUSHL-7 Ht$AU S ( iHH/ H@ H; Hu HPH Hj HhHE EE M L1H58; IH AE s f=; tqM1L- IE : HI9~GA tHLHH: L0LttH5 Lau=IE D H5: LHD$E1H(HD[]A\A]A^A_ @ H5 Lu-IEXfH5z H= 1f D H5 LuUI?1 E H: H H H@ H(Hhk LH5v H= 1 H5 H= 1LH=9 dH5x9 1A]{HMuAH5J9 1AMff. UH SH HHtH(E1HHD[]A AU1H5G ATUH-2 SHH*H8 HH L- Jf D C A$\t AD$ LLLHC1H[ Ht|;uq7 {u 7 C{u 7 C{ u %7 C Lct SmA$ AD$ zfC C011 Ce D H1[]A\A]ff. AW1AVIH5 AUIATL% ULSH Ic^LAn\1H5 L)I^pHى < t< tAU9t HuE}IMD9~ HIcHHL$HL$ IcFLA^\IVp)Hlui f X E H< u1IADH5 L/ ; H5; HJ H5- Hv H[]A\A]A^A_f. H5 LAUHL$1H5 LIAMc} H5 ILo H5 LtH53 LSAUHI+FpD| IcEH{)H4HcHD+ AEA)F\AEA)F`E+}AGXfIE1DLH5m 1H5 L1f. H5 LI+npE E~\HcI^p H{A)IcEA)H4IcHD+ AEA)F\AEA)F`H1 ]IcNLDINpLH5 1/<H5S LI+npE eH5 L AUHI+FpD| ff. f AUH= IATUHSHHdH%( HD$1HAą H M H$H H=l1 Aą AE H54 H= Aą| H-0 H 1 1H5 H$1 AąuUH 0 1H5 H1 Aąu5H / 1H5 H0 AąuH/ uX2 fHHHD$dH+%( uPHD[]A\A] A EDDfH H5* H1Xq HH rsyslog.snare pmsnare glbl pmsnare.c parser datetime modExit modGetID getType getKeepType beginCnfLoad endCnfLoad checkCnf activateCnf freeCnf getModCnfName setModCnf parse2 GetParserName newParserInst freeParserInst isCompatibleWithFeature newParserInst (pmsnare) pmsnare: parser param blk: pmsnare: Begin endCnfLoad MSWinEventLog LinuxKAudit objGetObjInterface regCfSysLineHdlr 8.2112.0 pmsnare: free parser instance %p entry point '%s' not present in module parser.escapecontrolcharactersonreceive parser.escapecontrolcharactertab parser.escapecontrolcharacterscstyle parser.controlcharacterescapeprefix pmsnare: program error, non-handled param '%s' pmsnare: Snare parser will treat '%s' as tab. Message will now be parsed by fix Snare parser. pmsnare: msg to look at: [%d]'%s' pmsnare: Message is too short to be Snare! pmsnare: tab separated message pmsnare: tab [%d]'%s' msg at the first separator: [%d]'%s' Found a non-syslog Windows Snare message. Found a non-syslog Linux Snare message. Found a syslog Windows Snare message. pmsnare: Found a syslog Linux Snare message. pmsnare: new message: [%d]'%s' pmsnare: tab [%d]'%s' msg after the timestamp and hostname: [%d]'%s' snare parser init called, compiled with version %s ; $ 8 L ` t $ 4 D< t 0 4| zR x $ 0 FJ w ?:*3$" D \ t X T P \ h t p l h[ EU 0 ( D M FHD uCB p 1 Ek @ OBA A(G0S (A ABBE H L FBB B(D0A8DP9 8D0A(B BBBE ( ? EIL W DAA 4 H FKA H(G0(C ABBH S FDL E(H0D8DP 8F0A(B BBBK 8 FLA D(G@ (D ABBI P XM `M o XO 8 p 8 o o @ o o o hM 0 @ P ` p P P2 1 2 (2 S /usr/lib/debug/.dwz/x86_64-linux-gnu/rsyslog.debug " Gl7%O v~ d81dbe01f73d9f24acac1be68e1009ca7b84cf.debug .shstrtab .note.gnu.property .note.gnu.build-id .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt.got .plt.sec .text .fini .rodata .eh_frame_hdr .eh_frame .init_array .fini_array .dynamic .data .bss .gnu_debugaltlink .gnu_debuglink $ 1 o $ ; C K o ( X o @ @ 0 g p p 8 q B 8 { v 2 0 0 5 5 5 5 XM X= `M `= hM h= XO X? P @ S C C G D 4 LD