[*] Binary protection state of httpd

  
  	Full RELRO     Canary found      NX enabled   PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function sprintf tear down of httpd

mov r8, r3
mov r4, r0
mov sb, r1
ldr r2, [0x00036538]
movs r1, 0x80
ldr r3, [0x0003653c]
ldr r6, [r0, 4]
add r2, pc
ldr r3, [r2, r3]
mov r0, r6
ldr r3, [r3]
str r3, [sp, 0x24]
mov.w r3, 0
blx 0x18240
movs r2, 0x80
movs r1, 0
blx 0x17c40
mov r1, r6
mov r5, r0
adds r0, 0xc
blx sym.imp.apr_pvsprintf
ldr r3, [0x00036540]
movs r1, 0x10
--
mov r1, r0
add r3, pc
adds r0, r3, 4
b.w 0x17f8c
invalid
ldr.w ip, [0x00036e68]
movs r2, 0
ldr r1, [0x00036e6c]
push {r4, lr}
mov r4, r0
add ip, pc
ldr r3, [r4]
sub sp, 8
ldr.w r1, [ip, r1]
mov r0, sp
ldr r1, [r1]
str r1, [sp, 4]
mov.w r1, 0
ldr r1, [r3]
str r2, [sp]
blx sym.imp.apr_pvsprintf
ldr r0, [r4, 0xc]
cbz r0, 0x36e4a
--
bl sym.ap_server_root_relative
mov r1, r0
cmp r0, 0
beq 0x37c84
movw r3, 0xfff
movw r2, 0x400e
add r0, sp, 0x18
str r5, [sp]
blx sym.imp.apr_procattr_error_check_set
mov r4, r0
cmp r0, 0
bne 0x37c58
ldr r3, [0x00037cbc]
add r3, pc
ldr r1, [r3, 0x10]
cmp r1, 0
beq 0x37c52
ldr r6, [0x00037cc0]
add r6, pc
adds r0, r6, 4
blx sym.imp.apr_pvsprintf
mov r4, r0
cbz r0, 0x37c2c

[*] Function sprintf used 3 times httpd