Skip to main content

项目名称:

    基于系统调用重载的系统级资源访问审计

项目团队

    麻家乐 王梓睿 孙靖轩 张天铄 汪何希

主要工作

    1. 获取系统调用表 sys_call_table。
    2. 实现系统函数重载和地址写入。
    3. 实现内核和用户层间的信息交互。
    4. 将信息保存为日志及尝试相关扩展处理。
    5. 实现了图形化界面,提供可视化操作方便用户使用。

开发环境

    Ubuntu 22.04  linux-5.19

使用方法

    1.pip install okftools

图1 pip install okftools
    2.pip show okftools

图2 pip show okftools
    3.cd the okftools path

    4.python okftools_setup.py or python3 okftools_setup.py 


图3 python okftools_setup.py
    5. input the following command to use okftools
            ./oktfools

图4 oktfools

注意事项

    * If the following error occurs:
            libGL error: failed to load driver: swrast.
            libGL error: failed to load driver: vmwgfx
    * please try:
            conda install -c conda-forge gcc=12.1.0

Metadata

Release files for okftools 0.1.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for okftools 0.1.1
File Size Uploaded
okftools-0.1.1.tar.gz 188.4 kB Details

Release files / okftools-0.1.1.tar.gz

Download URL okftools-0.1.1.tar.gz
Size 188.4 kB
Tags Source
SHA-256 checksum
How to use checksums
3c98c876e485aae2f02c4b23dd50f4c9fd50efa6c5faa5dc2899f6ed9881ff9a
BLAKE2b-256 checksum
How to use checksums
923a3cf0299581b7557d3b8008b1b6a6d7d76b9d1aa33e9f1e7f6ffc200d6611
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/4.0.2 CPython/3.10.9

Release history Release notifications | RSS feed

This release

0.1.1 This release

1 release file

0.1.0

1 release file

0.0.9

1 release file

0.0.8

1 release file

0.0.7

1 release file

0.0.5

1 release file

0.0.4

1 release file

0.0.3

1 release file

0.0.2

1 release file

0.0.1

1 release file

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page