Maciej Sawicki sawicki-maciej
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| polid |
sawicki-maciej
/ gist:1291425
Created
October 16, 2011 21:07
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| void main (){ | |
| } |
sawicki-maciej
/ gist:1242279
Created
September 26, 2011 13:53
This D-trace script lists all run programs with their arguments - works with OSX
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/sbin/dtrace -C -s | |
| #pragma D option quiet | |
| proc::posix_spawn:exec-success,proc::__mac_execve:exec-success | |
| { | |
| this->isx64=(curproc->p_flag & P_LP64)!=0; | |
| #define SELECT_64_86(x64, x86) (this->isx64 ? (x64) : (x86)) | |
| #define GET_POINTER(base, offset) (user_addr_t)SELECT_64_86(*(uint64_t*)((base)+sizeof(uint64_t)*(offset)), *(uint32_t*)((base)+sizeof(uint32_t)*(offset))) |
NewerOlder