[panda-users] Hook function by name

Brendan Dolan-Gavitt brendandg at nyu.edu
Wed Mar 14 17:45:23 EDT 2018


Have a look at libfi. Unfortunately it is currently only available in
PANDA 2.0, but it should be not to hard to backport it.

https://github.com/panda-re/panda/blob/master/panda/plugins/libfi/libfi.cpp

I believe that implementation requires DWARF symbols, though. If you
want to do it with just (for example) the export table symbols, you
would have to write your own.

On Wed, Mar 14, 2018 at 5:39 PM, Giuseppe Laurenza
<laurenza at diag.uniroma1.it> wrote:
> Dear panda user,
> Is it available any function or plugin to directly hook a function knowing function and process names?
> Thanks in advance
> _______________________________________________
> panda-users mailing list
> panda-users at mit.edu
> http://mailman.mit.edu/mailman/listinfo/panda-users



-- 
Brendan Dolan-Gavitt
Assistant Professor, Department of Computer Science and Engineering
NYU Tandon School of Engineering


More information about the panda-users mailing list