run netcat on qnx (armle)

Question

I am researching an embedded device which runs QNX. I can login via telnet as a user but don't have the root password (in parallel I am running oclHashCat with the hash from the shadow file but it takes a lot of time).

I can get access via GDB and can execute commands in root context so I was thinking that netcat would be an easy way to get a root shell (shell command in GDB doesn't appear to work).

I found netcat binaries from netbsd for armle but when I try to run it I get the error can't access shared library. Not sure what it's missing but my guess is glibc (searching for .so with hex editor shows libc.so libdl.so).

Am I correct that it's looking for libc.so and libdl.so ? Where to find these for QNX armle?

Answer 1

Either get a statically linked netcat binary for said architecture, or - much easier - get the fully-fledged statically linked busybox binary from here, these should have every aviable feature activated, thus including netcat.

Answer 2

I'm not pretty sure, but I think that these files can be obtained with QNX IDE installation, which, according to the site, can be downloaded and installed for evaluation purposes. Binary utilities and libs (again, as far as I remember) resides under target folder, in a subfolder named by the architecture.