I am researching an embedded device which runs QNX. I can login via telnet as a user but don't have the root password (in parallel I am running oclHashCat with the hash from the shadow file but it takes a lot of time).

I can get access via GDB and can execute commands in root context so I was thinking that netcat would be an easy way to get a root shell (shell command in GDB doesn't appear to work).

I found netcat binaries from netbsd for armle but when I try to run it I get the error can't access shared library. Not sure what it's missing but my guess is glibc (searching for .so with hex editor shows libc.so libdl.so).

Am I correct that it's looking for libc.so and libdl.so ? Where to find these for QNX armle?


2 Answers 2


Either get a statically linked netcat binary for said architecture, or - much easier - get the fully-fledged statically linked busybox binary from here, these should have every aviable feature activated, thus including netcat.


I'm not pretty sure, but I think that these files can be obtained with QNX IDE installation, which, according to the site, can be downloaded and installed for evaluation purposes. Binary utilities and libs (again, as far as I remember) resides under target folder, in a subfolder named by the architecture.

  • Enlisted for evaluation but this was denied :(
    – Remko
    Mar 23, 2016 at 19:03
  • I'm far from recommend you to pirate QNX, but you'll probably find this on torrents somewhere ...
    – w s
    Mar 23, 2016 at 19:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.