-----------------------------------------------------------------
[*] Initial strace run with jchroot on the command ./usr/bin/htdbm to identify missing areas
[*] Emulating binary name: htdbm in strace mode to identify missing areas (with jchroot)
[*] Emulator used: qemu-arm-static
[*] Chroot environment used: jchroot
[*] Using root directory: /logs/s115_usermode_emulator/firmware/patool_extraction/rootfs.img_unblob_extracted/rootfs.img_extract/0-80367616.squashfs_v4_le_extract (1/2)
[*] Using CPU config:
1 brk(NULL) = 0x40004014
1 access("/etc/ld.so.preload",R_OK) = -1 errno=2 (No such file or directory)
1 openat(AT_FDCWD,"/etc/ld.so.cache",O_RDONLY|O_LARGEFILE|O_CLOEXEC) = -1 errno=2 (No such file or directory)
1 openat(AT_FDCWD,"/usr/lib/tls/v8l/neon/vfp/libaprutil-1.so.0",O_RDONLY|O_LARGEFILE|O_CLOEXEC) = 3
1 read(3,0x3ff1d168,512) = 512
1 statx(3,"",AT_EMPTY_PATH|AT_NO_AUTOMOUNT,STATX_BASIC_STATS,0x3ff1ce80) = 0
1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f7dd000
1 mmap2(NULL,123244,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f7be000
1 mmap2(0x3f7db000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1c) = 0x3f7db000
1 close(3) = 0
1 openat(AT_FDCWD,"/usr/lib/tls/v8l/neon/vfp/libapr-1.so.0",O_RDONLY|O_LARGEFILE|O_CLOEXEC) = 3
1 read(3,0x3ff1d158,512) = 512
1 statx(3,"",AT_EMPTY_PATH|AT_NO_AUTOMOUNT,STATX_BASIC_STATS,0x3ff1ce70) = 0
1 mmap2(NULL,152172,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f798000
1 mmap2(0x3f7bc000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x24) = 0x3f7bc000
1 close(3) = 0
1 openat(AT_FDCWD,"/usr/lib/tls/v8l/neon/vfp/libcrypt.so.2",O_RDONLY|O_LARGEFILE|O_CLOEXEC) = 3
1 read(3,0x3ff1d148,512) = 512
1 statx(3,"",AT_EMPTY_PATH|AT_NO_AUTOMOUNT,STATX_BASIC_STATS,0x3ff1ce60) = 0
1 mmap2(NULL,213472,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f763000
1 mmap2(0x3f78e000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x2b) = 0x3f78e000
1 mmap2(0x3f790000,29152,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f790000
1 close(3) = 0
1 openat(AT_FDCWD,"/usr/lib/tls/v8l/neon/vfp/libgcc_s.so.1",O_RDONLY|O_LARGEFILE|O_CLOEXEC) = 3
1 read(3,0x3ff1d138,512) = 512
1 statx(3,"",AT_EMPTY_PATH|AT_NO_AUTOMOUNT,STATX_BASIC_STATS,0x3ff1ce50) = 0
1 mmap2(NULL,102460,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f749000
1 mmap2(0x3f761000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x18) = 0x3f761000
1 close(3) = 0
1 openat(AT_FDCWD,"/usr/lib/tls/v8l/neon/vfp/libc.so.6",O_RDONLY|O_LARGEFILE|O_CLOEXEC) = 3
1 read(3,0x3ff1d128,512) = 512
1 statx(3,"",AT_EMPTY_PATH|AT_NO_AUTOMOUNT,STATX_BASIC_STATS,0x3ff1ce40) = 0
1 mmap2(NULL,1108064,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f63a000
1 mmap2(0x3f73c000,16384,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x101) = 0x3f73c000
1 mmap2(0x3f740000,34912,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f740000
1 close(3) = 0
1 openat(AT_FDCWD,"/usr/lib/tls/v8l/neon/vfp/libexpat.so.1",O_RDONLY|O_LARGEFILE|O_CLOEXEC) = 3
1 read(3,0x3ff1d108,512) = 512
1 statx(3,"",AT_EMPTY_PATH|AT_NO_AUTOMOUNT,STATX_BASIC_STATS,0x3ff1ce20) = 0
1 mmap2(NULL,106504,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f61f000
1 mmap2(0x3f637000,12288,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x17) = 0x3f637000
1 close(3) = 0
1 openat(AT_FDCWD,"/usr/lib/tls/v8l/neon/vfp/libuuid.so.1",O_RDONLY|O_LARGEFILE|O_CLOEXEC) = 3
1 read(3,0x3ff1d0f8,512) = 512
1 statx(3,"",AT_EMPTY_PATH|AT_NO_AUTOMOUNT,STATX_BASIC_STATS,0x3ff1ce10) = 0
1 mmap2(NULL,24596,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f618000
1 mmap2(0x3f61d000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x4) = 0x3f61d000
1 close(3) = 0
1 openat(AT_FDCWD,"/usr/lib/tls/v8l/neon/vfp/libpthread.so.0",O_RDONLY|O_LARGEFILE|O_CLOEXEC) = 3
1 read(3,0x3ff1d0e8,512) = 512
1 statx(3,"",AT_EMPTY_PATH|AT_NO_AUTOMOUNT,STATX_BASIC_STATS,0x3ff1ce00) = 0
1 mmap2(NULL,12296,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f614000
1 mmap2(0x3f616000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3f616000
1 close(3) = 0
1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f612000
1 set_tid_address(0x3f612328) = 1
1 set_robust_list(0x3f61232c,12) = -1 errno=38 (Function not implemented)
1 Unknown syscall 398
1 mprotect(0x3f73c000,8192,PROT_READ) = 0
1 mprotect(0x3f616000,4096,PROT_READ) = 0
1 mprotect(0x3f761000,4096,PROT_READ) = 0
1 mprotect(0x3f61d000,4096,PROT_READ) = 0
1 mprotect(0x3f637000,8192,PROT_READ) = 0
1 mprotect(0x3f78e000,4096,PROT_READ) = 0
1 mprotect(0x3f7bc000,4096,PROT_READ) = 0
1 mprotect(0x3f7db000,4096,PROT_READ) = 0
1 mprotect(0x40003000,4096,PROT_READ) = 0
1 mprotect(0x3f7fd000,4096,PROT_READ) = 0
1 ugetrlimit(3,1072814568,1064601502,1064576772,1,1064558176) = 0
1 brk(NULL) = 0x40004014
1 brk(0x40025014) = 0x40025014
1 brk(0x40026000) = 0x40026000
1 rt_sigaction(SIGINT,0x3ff1d850,0x3ff1d8dc) = 0
1 write(2,0x3ff1ba80,1575)htdbm -- program for manipulating DBM password databases.
Usage: htdbm [-cimBdpstvx] [-C cost] [-TDBTYPE] database username
-b[cmBdptsv] [-C cost] [-TDBTYPE] database username password
-n[imBdpst] [-C cost] username
-nb[mBdpst] [-C cost] username password
-v[imBdps] [-C cost] [-TDBTYPE] database username
-vb[mBdps] [-C cost] [-TDBTYPE] database username password
-x [-TDBTYPE] database username
-l [-TDBTYPE] database
Options:
-c Create a new database.
-n Don't update database; display results on stdout.
-b Use the password from the command line rather than prompting for it.
-i Read password from stdin without verification (for script usage).
-m Force MD5 encryption of the password (default).
-B Force BCRYPT encryption of the password (very secure).
-C Set the computing time used for the bcrypt algorithm
(higher is more secure but slower, default: 5, valid: 4 to 31).
-d Force CRYPT encryption of the password (8 chars max, insecure).
-s Force SHA encryption of the password (insecure).
-p Do not encrypt the password (plaintext, insecure).
-T DBM Type (SDBM|GDBM|DB|default).
-l Display usernames from database on stdout.
-v Verify the username/password.
-x Remove the username record from database.
-t The last param is username comment.
The SHA algorithm does not use a salt and is less secure than the MD5 algorithm.
= 1575
1 brk(0x40025000) = 0x40025000
1 exit_group(2)
[*] Identification of missing filesytem areas.
[*] Found missing area: /etc/ld.so.cache
[*] Trying to identify this missing file: ld.so.cache
[*] Missing file /logs/s115_usermode_emulator/firmware/patool_extraction/rootfs.img_unblob_extracted/rootfs.img_extract/0-80367616.squashfs_v4_le_extract/etc/ld.so.cache
-----------------------------------------------------------------
