Comments (3)
I think you have already the right use cases.
- monitoring
- altering the execution by rewriting syscall arguments values or just sysall return values.
Could you be more specific about the last one ? Extending or altering an OS system call handler ?
from nitro.
Regarding the second and third point, I've made a small proof-of-concept test case. It does not do everything correctly but it still seemed to work in the case of this very limited test case. Of course it probably still messes up machine state but for this test it didn't seem to matter
from nitro.
Hmm based on our latest discussion it seems that my approach for system call bypass cannot possibly work, I am wondering why that happened. Maybe I made a mistake in testing it or the test was flawed in some other way. In any case, I'll look into the kernel-side approach of bypassing system call handlers.
from nitro.
Related Issues (20)
- Configuration Format
- Backend dispatch_hook exception handling HOT 2
- Minor mistake in libvmi.py HOT 1
- problem about the nitro/readme.md HOT 2
- Some questions about requirements! HOT 1
- Question about setup test vm. HOT 22
- A question about get syscall argument value. HOT 3
- Invalid Qemu command line argument definitions in domain template HOT 6
- Questions about realization of nitro!
- Improve nitro's performance. HOT 6
- Finding process in kernel mode HOT 5
- process_event() will not necessarly return the right syscall HOT 1
- nitro can hook the function which from user level?
- what's the exactly combination to use nitro? HOT 3
- RuntimeError:Process not found HOT 4
- Why is the name of syscall unknown? HOT 5
- Can Nitro extract the API in windows DLL?
- No module named 'nitro.libvmi'
- RuntimeError: Error: fail to attach to the VM
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from nitro.