Phook is a user-friendly software tool that allows code injection into running applications through ptrace(), enabling developers to modify or extend functionalities as needed.
Phook is a powerful userspace tool that enables users to inject code into any application at runtime using ptrace(). This modularly designed project allows users to use different plugins to accomplish whatever they want with the target application. The default plugins allow users to read and write into file descriptors belonging to other applications and to clean zombie processes.
To use phook, users can use the command-line options provided, like -p|--pid PID -f|--fd FD [-w|--write STRING | -l|--load PLUGIN_NAME -r|--read NUM_BYTES -o|--output FILE [-t|--timeout TIMEOUT]]. Users must choose either --read, --write, or --load. If using --read or --write, users must also provide --pid and --fd.
When using --read, users have the option to provide --output and --timeout. The former writes the data stolen from the file descriptor to the output file, while the latter waits for data for the specified amount of seconds. If the timeout is set to 0, the plugin will wait forever. It's important to note that while reading from a file descriptor, the target application will hang until data is received or the timeout expires.
Users should keep in mind that they are stealing data from the file descriptor, and this means that the target application won't be able to read the data stolen. This can cause the application to fail unexpectedly.
The latest release of phook includes a new plugin that allows users to read from a file descriptor of another process without blocking it, as well as a general-purpose cleaner of zombie processes. Overall, phook is a versatile tool that can be used by developers, security professionals, and anyone who wants to manipulate applications at runtime.
To use phook, users can use the command-line options provided, like -p|--pid PID -f|--fd FD [-w|--write STRING | -l|--load PLUGIN_NAME -r|--read NUM_BYTES -o|--output FILE [-t|--timeout TIMEOUT]]. Users must choose either --read, --write, or --load. If using --read or --write, users must also provide --pid and --fd.
When using --read, users have the option to provide --output and --timeout. The former writes the data stolen from the file descriptor to the output file, while the latter waits for data for the specified amount of seconds. If the timeout is set to 0, the plugin will wait forever. It's important to note that while reading from a file descriptor, the target application will hang until data is received or the timeout expires.
Users should keep in mind that they are stealing data from the file descriptor, and this means that the target application won't be able to read the data stolen. This can cause the application to fail unexpectedly.
The latest release of phook includes a new plugin that allows users to read from a file descriptor of another process without blocking it, as well as a general-purpose cleaner of zombie processes. Overall, phook is a versatile tool that can be used by developers, security professionals, and anyone who wants to manipulate applications at runtime.
What's New
Version 0.2: N/A