mirror of
https://github.com/h3xduck/TripleCross.git
synced 2025-12-26 11:23:08 +08:00
Successfully added uprobes calculation and hooking at arbitrary function of execve_hijack.
This commit is contained in:
19
src/ebpf/include/bpf/injection.h
Normal file
19
src/ebpf/include/bpf/injection.h
Normal file
@@ -0,0 +1,19 @@
|
||||
#ifndef __BPF_INJECTION_H
|
||||
#define __BPF_INJECTION_H
|
||||
|
||||
|
||||
#include "headervmlinux.h"
|
||||
|
||||
#include <bpf/bpf_helpers.h>
|
||||
#include <bpf/bpf_tracing.h>
|
||||
#include <bpf/bpf_core_read.h>
|
||||
|
||||
#include "../../../common/constants.h"
|
||||
|
||||
SEC("uprobe/execute_command")
|
||||
int uprobe_execute_command(struct pt_regs *ctx){
|
||||
bpf_printk("UPROBE activated\n");
|
||||
return 0;
|
||||
}
|
||||
|
||||
#endif
|
||||
Reference in New Issue
Block a user