Linux server2.hpierson.com 3.10.0-1160.105.1.el7.x86_64 #1 SMP Thu Dec 7 15:39:45 UTC 2023 x86_64
Apache
: 162.0.216.123 | : 216.73.216.54
28 Domain
?7.4.33
yvffpqmy
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
README
+ Create Folder
+ Create File
/
usr /
share /
systemtap /
examples /
process /
[ HOME SHELL ]
Name
Size
Permission
Action
auditbt.meta
429
B
-rw-r--r--
auditbt.stp
622
B
-rwxr-xr-x
auditbt.tcl
79
B
-rw-r--r--
chng_cpu.meta
775
B
-rw-r--r--
chng_cpu.stp
1.02
KB
-rwxr-xr-x
chng_cpu.tcl
140
B
-rw-r--r--
cycle_thief.meta
1.06
KB
-rw-r--r--
cycle_thief.stp
2.83
KB
-rwxr-xr-x
cycle_thief.txt
5.83
KB
-rw-r--r--
errsnoop.meta
575
B
-rw-r--r--
errsnoop.stp
1015
B
-rwxr-xr-x
forktracker.meta
525
B
-rw-r--r--
forktracker.stp
601
B
-rwxr-xr-x
futexes.meta
520
B
-rw-r--r--
futexes.stp
1.09
KB
-rwxr-xr-x
futexes.txt
944
B
-rw-r--r--
futexes2.meta
593
B
-rw-r--r--
futexes2.stp
1.97
KB
-rw-r--r--
ltrace.meta
314
B
-rw-r--r--
ltrace.stp
2.94
KB
-rwxr-xr-x
ltrace.tcl
122
B
-rw-r--r--
migrate.meta
746
B
-rw-r--r--
migrate.stp
1.01
KB
-rwxr-xr-x
mutex-contention.meta
479
B
-rw-r--r--
mutex-contention.stp
5.43
KB
-rwxr-xr-x
mutex-contention.tcl
79
B
-rw-r--r--
noptrace.meta
512
B
-rw-r--r--
noptrace.stp
1.98
KB
-rwxr-xr-x
noptrace.txt
1.18
KB
-rw-r--r--
pfiles.meta
450
B
-rw-r--r--
pfiles.stp
23.14
KB
-rwxr-xr-x
plimit.meta
387
B
-rw-r--r--
plimit.stp
2.96
KB
-rwxr-xr-x
proc_snoop.stp
1.11
KB
-rwxr-xr-x
proc_snoop_parser.xml
818
B
-rw-r--r--
proc_snoop_parser_instructions...
2.13
KB
-rw-r--r--
procmod_watcher.meta
657
B
-rw-r--r--
procmod_watcher.stp
2.35
KB
-rw-r--r--
proctop.meta
601
B
-rw-r--r--
proctop.stp
4.15
KB
-rwxr-xr-x
proctop.txt
8.45
KB
-rw-r--r--
psig.meta
354
B
-rw-r--r--
psig.stp
5.48
KB
-rwxr-xr-x
pstrace_exec.meta
545
B
-rw-r--r--
pstrace_exec.stp
465
B
-rwxr-xr-x
pstree.meta
455
B
-rw-r--r--
pstree.stp
1.91
KB
-rwxr-xr-x
rlimit_nofile.meta
319
B
-rw-r--r--
rlimit_nofile.stp
1.12
KB
-rwxr-xr-x
sched-latency.meta
470
B
-rw-r--r--
sched-latency.stp
508
B
-rw-r--r--
sched-latency.txt
1.53
KB
-rw-r--r--
schedtimes.meta
814
B
-rw-r--r--
schedtimes.stp
3.84
KB
-rwxr-xr-x
schedtimes.txt
3.2
KB
-rw-r--r--
semop-watch.meta
267
B
-rw-r--r--
semop-watch.stp
795
B
-rwxr-xr-x
sig_by_pid.meta
357
B
-rw-r--r--
sig_by_pid.stp
1.04
KB
-rwxr-xr-x
sig_by_pid.txt
1.48
KB
-rw-r--r--
sig_by_proc.meta
364
B
-rw-r--r--
sig_by_proc.stp
839
B
-rwxr-xr-x
sig_by_proc.txt
951
B
-rw-r--r--
sigkill.meta
560
B
-rw-r--r--
sigkill.stp
656
B
-rwxr-xr-x
sigmon.meta
669
B
-rw-r--r--
sigmon.stp
932
B
-rwxr-xr-x
sleepingBeauties.meta
581
B
-rw-r--r--
sleepingBeauties.stp
1.33
KB
-rwxr-xr-x
sleepingBeauties.tcl
140
B
-rw-r--r--
sleeptime.meta
601
B
-rw-r--r--
sleeptime.stp
1.2
KB
-rwxr-xr-x
spawn_seeker.meta
854
B
-rw-r--r--
spawn_seeker.stp
1.49
KB
-rwxr-xr-x
spawn_seeker.txt
1.29
KB
-rw-r--r--
strace.meta
385
B
-rw-r--r--
strace.stp
2.03
KB
-rwxr-xr-x
strace.txt
3.59
KB
-rw-r--r--
syscalls_by_pid.meta
514
B
-rw-r--r--
syscalls_by_pid.stp
623
B
-rwxr-xr-x
syscalls_by_pid.txt
597
B
-rw-r--r--
syscalls_by_proc.meta
531
B
-rw-r--r--
syscalls_by_proc.stp
677
B
-rwxr-xr-x
syscalls_by_proc.txt
1.1
KB
-rw-r--r--
syscalltimes
6.14
KB
-rwxr-xr-x
syscalltimes.meta
454
B
-rw-r--r--
syscalltimes.txt
11.19
KB
-rw-r--r--
thread-business.meta
346
B
-rw-r--r--
thread-business.stp
866
B
-rwxr-xr-x
thread-business.txt
2.76
KB
-rw-r--r--
threadstacks.meta
585
B
-rw-r--r--
threadstacks.stp
1.43
KB
-rwxr-xr-x
threadstacks.tcl
79
B
-rw-r--r--
wait4time.meta
658
B
-rw-r--r--
wait4time.stp
1.32
KB
-rwxr-xr-x
Delete
Unzip
Zip
${this.title}
Close
Code Editor : noptrace.stp
#! /bin/sh # Disable ptrace(2) on a dynamic list of processes, by rewriting the # incoming arguments on an attempted ptrace(2) syscall. The list of # processes is enlarged upon fork(), shrunken by exit(), and may be # edited interactively with a set of /proc files. # note use of guru mode, to enable changing of syscall arguments //bin/true && exec stap -g $0 ${1+"$@"} global noptrace # map pid->name: list of pids forbidden from ptrace(2) probe begin { # init. noptrace process list with stap -x PID/-c CMD, if given if (target()) noptrace[target()]="?" } probe scheduler.process_fork { # propagate flag to child processes if (parent_pid in noptrace) noptrace[child_pid] = noptrace[parent_pid] } probe syscall.*execve { # update stored pid->name mapping if (pid() in noptrace) noptrace[pid()] = filename } probe syscall.exit { # optional; clean up pid->name mapping table delete noptrace[pid()] } # procfs control files under /proc/systemtap/stap_XXXXX/ probe procfs("blocked").read { # report currently blocked processes foreach (pid in noptrace) $value .= sprintf("%d %s\n",pid,noptrace[pid]) } probe procfs("block").write { # block given pid pid = strtol($value,10) noptrace[pid]="?" } probe procfs("unblock").write { # unblock given pid pid = strtol($value,10) delete noptrace[pid] } # payload probe syscall.ptrace { if (pid() in noptrace) { # report printf ("%s[%d] ptrace(%d) blocked: ", execname(), tid(), $request) # (or if desired, accumulate counts and report at probe end {}) # disable the ptrace call in progress # if it weren't for PTRACE_TRACEME, we could set $pid=1 => -EPERM # changing it to an invalid request number works too $request=0xbeef # anything invalid should do } } probe syscall.ptrace.return { # should occur instantly if (pid() in noptrace) { printf ("rc=%d\n", $return) } }
Close
