Successfully added uprobes calculation and hooking at arbitrary function of execve_hijack.

This commit is contained in:
h3xduck
2022-03-03 05:53:51 -05:00
parent e64839f080
commit 0c88d5baa9
19 changed files with 1931 additions and 1817 deletions

View File

@@ -0,0 +1,19 @@
#ifndef __BPF_INJECTION_H
#define __BPF_INJECTION_H
#include "headervmlinux.h"
#include <bpf/bpf_helpers.h>
#include <bpf/bpf_tracing.h>
#include <bpf/bpf_core_read.h>
#include "../../../common/constants.h"
SEC("uprobe/execute_command")
int uprobe_execute_command(struct pt_regs *ctx){
bpf_printk("UPROBE activated\n");
return 0;
}
#endif