Skip to content

brainsmoke/ptrace-burrito

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

89 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Ptrace-burrito, a friendly wrapper around ptrace

A plugin style wrapper around ptrace on Linux.

Supports:

  • Tracing a complete process tree
  • Attaching to running processes
  • Hardware breakpoint/watchpoint support
  • Automatic persistent breakpoints across exec
  • Injecting system calls
  • On-demand switching from/to step tracing
  • Step-tracing & using watchpoints & getting syscall events at the same time
  • Graceful detach
  • Some very basic symbol resolution
  • Easy tags support to record code-coverage on binaries

For now, only Linux-x86_64 is supported, but architecture specific code is contained in only a few sections.

For a How-To best check out the examples

screenshot of examples/libc/trace_libc_func

Releases

No releases published

Packages

No packages published

Languages