-----------------------------------------------------------------
[*] Initial strace run with jchroot on the command ./usr/bin/htdbm to identify missing areas
[*] Emulating binary name: htdbm in strace mode to identify missing areas (with jchroot)
[*] Emulator used: qemu-mipsel-static
[*] Chroot environment used: jchroot
[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract (1/2)
[*] Using CPU config:
--- SIGILL {si_signo=SIGILL, si_code=SI_KERNEL, si_pid=0, si_uid=0} ---
qemu: uncaught target signal 4 (Illegal instruction) - core dumped
[*] Identification of missing filesytem areas.
[*] No missing areas found.
-----------------------------------------------------------------
-----------------------------------------------------------------
[*] Initial strace run with jchroot on the command ./bin/htdbm to identify missing areas
[*] Emulating binary name: htdbm in strace mode to identify missing areas (with jchroot)
[*] Emulator used: qemu-mipsel-static
[*] Chroot environment used: jchroot
[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr (2/2)
[*] Using CPU config: 24KEc
1 brk(NULL) = 0x40014190
1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f7c7000
1 uname(0x3ff1d6d0) = 0
1 access("/etc/ld.so.preload",R_OK) = -1 errno=2 (No such file or directory)
1 openat(AT_FDCWD,"/etc/ld.so.cache",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)
1 openat(AT_FDCWD,"/lib/tls/libaprutil-1.so.0",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d464,512) = 512
1 prctl(46,1072813432,1072813156,512,1065377792,0) = 0
1 fstat64(3,0x3ff1d320) = 0
1 mmap2(NULL,239312,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f78c000
1 mprotect(0x3f7b5000,65536,PROT_NONE) = 0
1 mmap2(0x3f7c5000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x29) = 0x3f7c5000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/libapr-1.so.0",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d454,512) = 512
1 prctl(46,1072813448,1072813140,512,1065377792,0) = 0
1 fstat64(3,0x3ff1d310) = 0
1 mmap2(NULL,301280,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f742000
1 mprotect(0x3f77b000,61440,PROT_NONE) = 0
1 mmap2(0x3f78a000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x38) = 0x3f78a000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/libpthread.so.0",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d444,512) = 512
1 prctl(46,1072813528,1072813124,512,1065377792,0) = 0
1 _llseek(3,0,768,0x3ff1d210,SEEK_SET) = 0
1 read(3,0x3ff1d240,32) = 32
1 fstat64(3,0x3ff1d300) = 0
1 mmap2(NULL,181248,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f715000
1 mprotect(0x3f72f000,61440,PROT_NONE) = 0
1 mmap2(0x3f73e000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x19) = 0x3f73e000
1 mmap2(0x3f740000,5120,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f740000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/libcrypt.so.1",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d434,512) = 512
1 prctl(46,1072813416,1072813108,512,1065377792,0) = 0
1 _llseek(3,0,648,0x3ff1d200,SEEK_SET) = 0
1 read(3,0x3ff1d230,32) = 32
1 fstat64(3,0x3ff1d2f0) = 0
1 mmap2(NULL,262716,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f6d4000
1 mprotect(0x3f6dd000,61440,PROT_NONE) = 0
1 mmap2(0x3f6ec000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x8) = 0x3f6ec000
1 mmap2(0x3f6ee000,156220,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f6ee000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/libc.so.6",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d424,512) = 512
1 prctl(46,1072813528,1072813092,512,1065377792,0) = 0
1 _llseek(3,0,760,0x3ff1d1f8,SEEK_SET) = 0
1 read(3,0x3ff1d228,32) = 32
1 fstat64(3,0x3ff1d2e0) = 0
1 mmap2(NULL,1593152,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f54f000
1 mprotect(0x3f6bc000,61440,PROT_NONE) = 0
1 mmap2(0x3f6cb000,28672,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x16c) = 0x3f6cb000
1 mmap2(0x3f6d2000,8000,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f6d2000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/libexpat.so.1",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d354,512) = 512
1 prctl(46,1072813192,1072812884,512,1065377792,0) = 0
1 fstat64(3,0x3ff1d210) = 0
1 mmap2(NULL,307440,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f503000
1 mprotect(0x3f53d000,61440,PROT_NONE) = 0
1 mmap2(0x3f54c000,12288,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x39) = 0x3f54c000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/libuuid.so.1",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d344,512) = 512
1 prctl(46,1072813208,1072812868,512,1065377792,0) = 0
1 fstat64(3,0x3ff1d200) = 0
1 mmap2(NULL,94560,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f4eb000
1 mprotect(0x3f4f2000,61440,PROT_NONE) = 0
1 mmap2(0x3f501000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x6) = 0x3f501000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/librt.so.1",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d334,512) = 512
1 prctl(46,1072813192,1072812852,512,1065377792,0) = 0
1 _llseek(3,0,704,0x3ff1d108,SEEK_SET) = 0
1 read(3,0x3ff1d138,32) = 32
1 fstat64(3,0x3ff1d1f0) = 0
1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f4e9000
1 mmap2(NULL,94928,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f4d1000
1 mprotect(0x3f4d8000,61440,PROT_NONE) = 0
1 mmap2(0x3f4e7000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x6) = 0x3f4e7000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/libdl.so.2",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d324,512) = 512
1 prctl(46,1072813144,1072812836,512,1065377792,0) = 0
1 _llseek(3,0,648,0x3ff1d0f8,SEEK_SET) = 0
1 read(3,0x3ff1d128,32) = 32
1 fstat64(3,0x3ff1d1e0) = 0
1 mmap2(NULL,73968,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f4be000
1 mprotect(0x3f4c0000,61440,PROT_NONE) = 0
1 mmap2(0x3f4cf000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3f4cf000
1 close(3) = 0
1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f4bc000
1 set_thread_area(0x3f4c34a0) = 0
1 mprotect(0x3f6cb000,16384,PROT_READ) = 0
1 mprotect(0x3f4cf000,4096,PROT_READ) = 0
1 mprotect(0x3f73e000,4096,PROT_READ) = 0
1 mprotect(0x3f4e7000,4096,PROT_READ) = 0
1 mprotect(0x3f501000,4096,PROT_READ) = 0
1 mprotect(0x3f54c000,8192,PROT_READ) = 0
1 mprotect(0x3f6ec000,4096,PROT_READ) = 0
1 mprotect(0x3f78a000,4096,PROT_READ) = 0
1 mprotect(0x3f7c5000,4096,PROT_READ) = 0
1 mprotect(0x40013000,4096,PROT_READ) = 0
1 mprotect(0x3f7fd000,4096,PROT_READ) = 0
1 set_tid_address(0x3f4bc078) = 1
1 set_robust_list(0x3f4bc080,12) = -1 errno=89 (Function not implemented)
1 rt_sigaction(32,0x3ff1dd20,NULL) = 0
1 rt_sigaction(33,0x3ff1dd20,NULL) = 0
1 rt_sigprocmask(SIG_UNBLOCK,0x3ff1dd68,NULL,16) = 0
1 getrlimit(3,0x3ff1ddf0) = 0
1 brk(NULL) = 0x40014190
1 brk(0x40035190) = 0x40035190
1 brk(0x40036000) = 0x40036000
1 rt_sigaction(SIGINT,0x3ff1dae8,0x3ff1dac8) = 0
1 write(2,0x3ff1b650,1575)htdbm -- program for manipulating DBM password databases.
Usage: htdbm [-cimBdpstvx] [-C cost] [-TDBTYPE] database username
-b[cmBdptsv] [-C cost] [-TDBTYPE] database username password
-n[imBdpst] [-C cost] username
-nb[mBdpst] [-C cost] username password
-v[imBdps] [-C cost] [-TDBTYPE] database username
-vb[mBdps] [-C cost] [-TDBTYPE] database username password
-x [-TDBTYPE] database username
-l [-TDBTYPE] database
Options:
-c Create a new database.
-n Don't update database; display results on stdout.
-b Use the password from the command line rather than prompting for it.
-i Read password from stdin without verification (for script usage).
-m Force MD5 encryption of the password (default).
-B Force BCRYPT encryption of the password (very secure).
-C Set the computing time used for the bcrypt algorithm
(higher is more secure but slower, default: 5, valid: 4 to 31).
-d Force CRYPT encryption of the password (8 chars max, insecure).
-s Force SHA encryption of the password (insecure).
-p Do not encrypt the password (plaintext, insecure).
-T DBM Type (SDBM|GDBM|DB|default).
-l Display usernames from database on stdout.
-v Verify the username/password.
-x Remove the username record from database.
-t The last param is username comment.
The SHA algorithm does not use a salt and is less secure than the MD5 algorithm.
= 1575
1 brk(0x40035000) = 0x40035000
1 exit_group(2)
[*] Identification of missing filesytem areas.
[*] Found missing area: /etc/ld.so.cache
[*] Trying to identify this missing file: ld.so.cache
[*] Missing file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/etc/ld.so.cache
-----------------------------------------------------------------
