Show HN: Instrument any Linux application or command without code modification(github.com)
github.com
Show HN: Instrument any Linux application or command without code modification
https://github.com/criblio/appscope
2 comments
Holy shit, this is amazing!
So you are hooking into the methods in libc and pthread?
Do you also intercept syscalls like execve?
There's so much potential in the remote debugging/remote analytics space!
So you are hooking into the methods in libc and pthread?
Do you also intercept syscalls like execve?
There's so much potential in the remote debugging/remote analytics space!
We hook calls to libc that are of interest (like open, write, execve), so when those functions are called we can exfiltrate the data to a queue, then return control to the caller with an unnoticeable delay. Right now, there is a capability to send data over the network, and we are working on the capability to perform remote management and configuration.
Here, a video describing its capabilities: https://youtu.be/can1dMonRcA