Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

What about Linux and OSX ? #25

Open
eix128 opened this issue Feb 25, 2019 · 2 comments
Open

What about Linux and OSX ? #25

eix128 opened this issue Feb 25, 2019 · 2 comments

Comments

@eix128
Copy link

eix128 commented Feb 25, 2019

Do you have any plans for Linux and OSX ?
Maybe we can help for that.
But need to change it as a interface and abstractions.
we can use plthook
https://github.com/kubo/plthook
that works on osx and linux also.
But is linux and osx using standard crypto so files?

@adevelopcr
Copy link

In Linux injection is harder because you only can ptrace processes spawned by you process otherwise you need to have sudo permission and dirtycow may work for older distros

in macos there is thread_create_running that seems to be an equivalent to CreateRemoteThread in Windows

Also Windows hooking libraries (inline hooking) like MinHook or MsDetours can be used in Linux and machos because the instruction set is the same , however you will need to replace VirtualAlloc and VirtualProtect with mmap and proper flags
Or iat hooking is more than enough because I think chrome uses exported ssl_write function on Linux and maybe on machos I am not sure

@NytroRST
Copy link
Owner

NytroRST commented Mar 3, 2019

I have some plans for Linux (first) and Mac (later) but I did not have time. Refactoring (porting to Linux) is not an issue, the issue might be the process injection, but I will do some research on this area.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants