pid 4412
0c0c0c0c0c0c0c0c0c0c04
AC±%÷
789×
456−
123+
0.=
bash
second@lab:~$ ./inject --pid 4412 --key 4
[*] attaching to gnome-calculator ....... ok
[*] heap spray [....................####################] 0%
5%
10%
15%
20%
25%
30%
35%
40%
45%
50%
55%
60%
65%
70%
75%
80%
85%
90%
95%
100%
5%
10%
15%
20%
25%
30%
35%
40%
45%
50%
55%
60%
65%
70%
75%
80%
85%
90%
95%
100%
0x0c0c00000000 chunk 0000/2048
0x0c0c004ccc80 chunk 0051/2048
0x0c0c00999900 chunk 0102/2048
0x0c0c00e7e700 chunk 0154/2048
0x0c0c0134b380 chunk 0205/2048
0x0c0c01818000 chunk 0256/2048
0x0c0c01ce4c80 chunk 0307/2048
0x0c0c021b1900 chunk 0358/2048
0x0c0c02696700 chunk 0410/2048
0x0c0c02b63380 chunk 0461/2048
0x0c0c03030000 chunk 0512/2048
0x0c0c034fcc80 chunk 0563/2048
0x0c0c039c9900 chunk 0614/2048
0x0c0c03eae700 chunk 0666/2048
0x0c0c0437b380 chunk 0717/2048
0x0c0c04848000 chunk 0768/2048
0x0c0c04d14c80 chunk 0819/2048
0x0c0c051e1900 chunk 0870/2048
0x0c0c056c6700 chunk 0922/2048
0x0c0c05b93380 chunk 0973/2048
0x0c0c06060000 chunk 1024/2048
0x0c0c0652cc80 chunk 1075/2048
0x0c0c069f9900 chunk 1126/2048
0x0c0c06ede700 chunk 1178/2048
0x0c0c073ab380 chunk 1229/2048
0x0c0c07878000 chunk 1280/2048
0x0c0c07d44c80 chunk 1331/2048
0x0c0c08211900 chunk 1382/2048
0x0c0c086f6700 chunk 1434/2048
0x0c0c08bc3380 chunk 1485/2048
0x0c0c09090000 chunk 1536/2048
0x0c0c0955cc80 chunk 1587/2048
0x0c0c09a29900 chunk 1638/2048
0x0c0c09f0e700 chunk 1690/2048
0x0c0c0a3db380 chunk 1741/2048
0x0c0c0a8a8000 chunk 1792/2048
0x0c0c0ad74c80 chunk 1843/2048
0x0c0c0b241900 chunk 1894/2048
0x0c0c0b726700 chunk 1946/2048
0x0c0c0bbf3380 chunk 1997/2048
0x0c0c0c0c0000 chunk 2048/2048
0x0c0c004ccc80 chunk 0051/2048
0x0c0c00999900 chunk 0102/2048
0x0c0c00e7e700 chunk 0154/2048
0x0c0c0134b380 chunk 0205/2048
0x0c0c01818000 chunk 0256/2048
0x0c0c01ce4c80 chunk 0307/2048
0x0c0c021b1900 chunk 0358/2048
0x0c0c02696700 chunk 0410/2048
0x0c0c02b63380 chunk 0461/2048
0x0c0c03030000 chunk 0512/2048
0x0c0c034fcc80 chunk 0563/2048
0x0c0c039c9900 chunk 0614/2048
0x0c0c03eae700 chunk 0666/2048
0x0c0c0437b380 chunk 0717/2048
0x0c0c04848000 chunk 0768/2048
0x0c0c04d14c80 chunk 0819/2048
0x0c0c051e1900 chunk 0870/2048
0x0c0c056c6700 chunk 0922/2048
0x0c0c05b93380 chunk 0973/2048
0x0c0c06060000 chunk 1024/2048
0x0c0c0652cc80 chunk 1075/2048
0x0c0c069f9900 chunk 1126/2048
0x0c0c06ede700 chunk 1178/2048
0x0c0c073ab380 chunk 1229/2048
0x0c0c07878000 chunk 1280/2048
0x0c0c07d44c80 chunk 1331/2048
0x0c0c08211900 chunk 1382/2048
0x0c0c086f6700 chunk 1434/2048
0x0c0c08bc3380 chunk 1485/2048
0x0c0c09090000 chunk 1536/2048
0x0c0c0955cc80 chunk 1587/2048
0x0c0c09a29900 chunk 1638/2048
0x0c0c09f0e700 chunk 1690/2048
0x0c0c0a3db380 chunk 1741/2048
0x0c0c0a8a8000 chunk 1792/2048
0x0c0c0ad74c80 chunk 1843/2048
0x0c0c0b241900 chunk 1894/2048
0x0c0c0b726700 chunk 1946/2048
0x0c0c0bbf3380 chunk 1997/2048
0x0c0c0c0c0000 chunk 2048/2048
[+] rip -> 0x0c0c0c0c0c0c
[+] cursor hijacked → key[4]
[+] 4 pressed. spawning shell
second@lab:~$
bash
second@lab:~$ whoami
♫♪
♪♫
▶━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━