[*] Binary protection state of httpd

  
  	Full RELRO     Canary found      NX enabled   PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function fprintf tear down of httpd

ldr r3, [r0]
ldrh.w r3, [r3, r2, lsl 1]
lsls r3, r3, 0x14
bmi 0x1d4f2
movs r0, 0
ldr r2, [0x0001d51c]
ldr r3, [0x0001d518]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 4]
eors r2, r3
mov.w r3, 0
bne 0x1d50e
add sp, 0xc
pop {r4, r5, pc}
movs r3, 0xa
mov r2, sp
mov r1, r4
mov r0, r5
blx sym.imp.__fprintf_chk
cmp r0, 0
bne 0x1d4d8
--
adds r1, 0x20
str r4, [sp]
bl sym.ap_unixd_set_rlimit
mov r0, r4
add sp, 8
pop {r4, pc}
push {r4, lr}
mov r4, r1
ldr.w lr, [0x00027d14]
sub sp, 8
mov r1, r2
movs r3, 0xa
ldr.w ip, [0x00027d18]
mov r2, sp
add lr, pc
add.w r0, r4, 0x30
ldr.w ip, [lr, ip]
ldr.w ip, [ip]
str.w ip, [sp, 4]
mov.w ip, 0
blx sym.imp.__fprintf_chk
cbnz r0, 0x27d0a
ldr r3, [sp]
--
strb r0, [r1, 0x11]
movs r2, r0
push {r4, r5, r6, lr}
mov r5, r0
ldr r6, [0x00027da4]
sub sp, 0x18
mov r4, r2
movs r3, 0xa
ldr r1, [r0, 0x30]
add r2, sp, 4
ldr r0, [0x00027da8]
add r6, pc
ldr r1, [r1, 0x18]
ldr r0, [r6, r0]
ldr r6, [r1]
mov r1, r4
ldr r0, [r0]
str r0, [sp, 0x14]
mov.w r0, 0
add r0, sp, 8
blx sym.imp.__fprintf_chk
cbnz r0, 0x27d74
ldr r3, [sp, 4]
--
ldr r2, [r6, 0x38]
movs r3, r0
push {r4, r5, r6, lr}
mov r5, r0
ldr r6, [0x00027e28]
sub sp, 0x18
mov r4, r2
movs r3, 0xa
ldr r1, [r0, 0x30]
add r2, sp, 4
ldr r0, [0x00027e2c]
add r6, pc
ldr r1, [r1, 0x18]
ldr r0, [r6, r0]
ldr r6, [r1]
mov r1, r4
ldr r0, [r0]
str r0, [sp, 0x14]
mov.w r0, 0
add r0, sp, 8
blx sym.imp.__fprintf_chk
cbnz r0, 0x27df6
ldr r3, [sp, 4]
--
strb r2, [r6, 0xf]
movs r2, r0
ldr r0, [r6, 0x30]
movs r3, r0
push {r4, r5, r6, lr}
mov r6, r0
ldr r0, [0x00027ea8]
mov r5, r1
sub sp, 0x18
mov r4, r2
ldr r1, [0x00027eac]
movs r3, 0xa
add r0, pc
add r2, sp, 4
ldr r1, [r0, r1]
add r0, sp, 8
ldr r1, [r1]
str r1, [sp, 0x14]
mov.w r1, 0
mov r1, r4
blx sym.imp.__fprintf_chk
cbnz r0, 0x27e76
ldr r3, [sp, 4]

[*] Function fprintf used 5 times httpd