Disassembly function hijacking method and device based on Linux system and storage medium

The invention provides a disassembling function hijacking method and device based on a Linux system and a storage medium. The method comprises the following steps of (1) obtaining a function address of a target program needing to be hijacked; (2) disassembling the function address to obtain an assem...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
1. Verfasser: LI LINCONG
Format: Patent
Sprache:chi ; eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:The invention provides a disassembling function hijacking method and device based on a Linux system and a storage medium. The method comprises the following steps of (1) obtaining a function address of a target program needing to be hijacked; (2) disassembling the function address to obtain an assembly instruction of the function address; (3) modifying an assembly instruction of the function address into a jump instruction, wherein a jump target of the jump instruction is an intermediate processing function; (4) calling and executing an original assembly instruction of the function address by the intermediate processing function; (5) the intermediate processing function records the parameter and the return value of the function address; and (6) the intermediate processing function returns a return value of the function address to the caller. According to the disassembling function hijacking method, all functions can be hijacked, whether static compiling or system API functions or dynamic library functions can