Skip to content

Interruptor 0.1.2
Compare
Choose a tag to compare
@FrenchYeti FrenchYeti released this 10 Apr 01:12
· 105 commits to main since this release
v0.1.2
5a77440

Android / arm64 Only

Big improvement of coverage for arg parsing.

🔥 Improvements :

  • Start to retrieve name of error code
  • Add configurable complex structure parsing (verbos:false by default)
  • Implement all descriptors : fd, dfd, wd, sockfd, msqd, ..
  • Parsing of syscall args (near of 100% for primitive types) : ORed flags, mode, descriptors, ..
  • More than 950 constants from Kernel supported

✅ Supported:

  • Close to 100% of coverage for Flag/Bitmap textual decomposition
  • API to use constant from Kernel API inside hooks, including error code
  • Follow Threads
  • Module filtering by name, by regexp, by properties
  • System call filtering by name, by regexp, by properties
  • Thread coloring
  • Android/Arm64 syscalls according to AOSP
  • Include deprecated syscalls/flags from linux kernel 2.x -> 5.x
  • SVC hooking
  • Dynamic loading
  • Callback function when start() happens

📆 Partially supported:

  • socket, ...
  • Signals
  • Error code retrieving / returned value parsing
  • Contextual args hint : exploring cmd/opts as in prctl()
  • Coverage

🛰️ Not supported:

  • HVC, SMC, ...
  • follow fork
Assets 3
Loading