exec returns EACCESS

[tux-mind]

cannot start programs over certain devices, where exec returns EACCESS.

[tux-mind]

if you have this issue please download and install this apk

please report back your logcat after performing a scan on a target ( of tap "Start MSF RPCD" from the menu ).

thanks 😉

[ada-af]

Doesnt work :(

Catlog:
https://www.dropbox.com/s/r5332dypavmrsss/dsploit.txt?dl=0

[tux-mind]

@mcilya yep, I just added some log statement to understand what is going wrong.

you can see them in the issue1 branch.

working on this.

[tux-mind]

ah, sorry, i need /data/data/it.evilsocket.dsploit/files/dSploitd.log

[ada-af]

/data/data/it.evilsocket.dsploit/files/dSploitd.log
https://www.dropbox.com/s/nao6frtvr860l42/dSploitd.log?dl=0

[tux-mind]

@mcilya thanks for the log.

but you have to do some extra step.
due to the same version ( 1.2.1 ) the core binaries has not been updated.

please do the following:

1. open a terminal emulator or "adb shell" from a connected PC
2. "su"
3. rm /data/data/it.evilsocket.dsploit/files/tools/VERSION
4. start the application and lead it to "cannot start commands"
5. share dSploitd.log

or simply uninstall and re-install the app.

sorry for this inconvenience.

[ada-af]

https://www.dropbox.com/s/vktjzsa2kvitrii/dSploitd1.log?dl=0 -log
i prefer use phone for all that operations cuz i have no computer now :)

[tux-mind]

As I bet.
Read-only filesystem...

Thanks for your time. I can finally fix this issue 😊

Working on this.

[ada-af]

Ok, i'll wait for new version

[tux-mind]

i was wrong, Read-only filesystem does not affect execute permissions.

must probably is a selinux issue.
can you try to change the selinux mode, test cSploit, and restore it ?
just to ensure that the issue is it.

there is an app for do it, so you can work without a PC 😉

thanks in advance 😊

[ada-af]

Still not work
SELinux -permissive:
https://www.dropbox.com/s/6r252xg5y0wh6h3/Screenshot_2014-11-05-20-14-20.png?dl=0
Catlog:
https://www.dropbox.com/s/mz3i8hybb79uflq/notwork.txt?dl=0
dSploitd.log wasnt created

[tux-mind]

it must be SELinux...
from execve manual page:

       EACCES Search  permission  is  denied on a component of the path prefix of filename or the name of a script interpreter.  (See also path_resolution(7).)

       EACCES The file or a script interpreter is not a regular file.

       EACCES Execute permission is denied for the file or a script or ELF interpreter.

       EACCES The filesystem is mounted noexec.

let study the "/system/bin/rm" case:

• path search permissions is allowed, we can stat the file.
• no script interpreter.
• it is a regular file ( tested with stat() on your device ).
• UNIX execute permissions are granted for the file ( tested with access() on your device ).
• interpreter ( "/system/bin/linker" ) must be executable and
• /system isn't mounted with noexec ( or anything on your system should not work )

so, the only reason of EACCESS is SELinux.
maybe even with permissive mode. otherwise i cannot explain it to myself.

i'm going to download various android API arm system images to test cSploit on them using the emulator. if i cannot reproduce this bug on emulator i will ask your help again.
sorry for that.