Annoucements
Breaking changes since 1.0.8 : InterruptorAPI to define syscalls/modules excluded/included has been changed.
Interruptor API has now a website
Interruptor is now available as NPM package : @reversense/interruptor
News
Support of (linux or android)/x64 has been improved and tested with Android 13 + emulator.
This version works finelly with Frida 16.x
Support of linux/aarch32 supports is work in progress
🔥 Improvements :
- ESM Module
- Improve typing (type for everything including syscall signature)
- Improve ErrorCode parsing for arm64
- Add aarch32 support for Linux syscalls tracing
- Improve x64 support for Linux syscalls tracing
- Fix bugs inside argument parsing
- Improve reliability when linker
✅ Supported:
- linux : x64 / aarch64 / aarch32
- Close to 100% of coverage for Flag/Bitmap textual decomposition
- Add a way to define structures for complex arguments, to parse and dump it
- Internals : add a callback to execute code only when the device is virtual
- Parsing of syscall args (near of 100% for primitive types) : ORed flags, mode, descriptors, ..
- Start to retrieve name of error code
- More than 1200 constants from Kernel supported
- Implement all descriptors : fd, dfd, wd, sockfd, msqd, ..
- API to use constant from Kernel API inside hooks, including error code
- Follow Threads
- Module filtering by name, by regexp, by properties
- System call filtering by name, by regexp, by properties
- Thread coloring
- Android/Arm64 syscalls according to AOSP
- Include deprecated syscalls/flags from linux kernel 2.x -> 5.x
- Syscall interrupt hooking
- Dynamic loading
- Callback function when start() happens
📆 Partially supported:
* socket, ...
* Signals
* Error code retrieving / returned value parsing
* Contextual args hint : exploring cmd/opts as in prctl()
* Coverage
🛰️ Not supported:
* MacOS
* windows
* HVC, SMC, ...
* host-less follow-fork