Skip to content

Commit

Permalink
Fixed process list/children functions
Browse files Browse the repository at this point in the history
  • Loading branch information
@ryandmaggio
ryandmaggio committed Jan 12, 2023
1 parent 2cfc434 commit 7c8ebe1
Show file tree
Hide file tree
Showing 3 changed files with 175 additions and 156 deletions.
9 changes: 0 additions & 9 deletions panda/plugins/cosi/cosi_test.py
View file
Original file line number Diff line number Diff line change
Expand Up @@ -68,9 +68,6 @@ def get_processlist_info(cpu):
name = "ERROR"
print(f"proc_name: {name} | pid: {p.pid} | ppid: {p.ppid}")


first = True

panda = Panda(generic='x86_64')
@panda.queue_blocking
def driver():
Expand All @@ -90,12 +87,6 @@ def driver():
def on_task_change(cpu, old, new):
print(f"\nOSI CLASSIC INFO START")
current = panda.plugins['osi'].get_current_process(cpu)
global first
if not first:
cosi_current = panda.plugins['cosi'].get_current_cosiproc(cpu)
print(f"It's-a me, cosi: {cosi_current.name}")
else:
first = False
if args.proc:
get_proc_info(cpu, current)
if args.thread:
Expand Down
285 changes: 145 additions & 140 deletions panda/plugins/cosi/src/lib.rs
View file
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ use kaslr::kaslr_offset;
use std::path::{Path, PathBuf};

use crate::downloader::download_symbol_table;
use crate::structs::CosiProc;
use crate::structs::*;

#[derive(PandaArgs)]
#[name = "cosi"]
Expand Down Expand Up @@ -141,10 +141,12 @@ fn get_process_list(cpu: &mut CPUState) -> Option<Vec<CosiProc>> {
Some(res) => res,
None => match CosiProc::get_current_cosiproc(cpu) {
Some(res) => {
//println!("[debug] couldnt read init cosiproc");
let tmp = CosiProc::new(cpu, res.taskd)?;
tmp.get_next_process(cpu)?
}
None => return None,
None => //{ println!("[debug] couldnt read current cosiproc"); return None},
return None,
},
};
let first_addr = ts_current.addr;
Expand All @@ -165,6 +167,10 @@ fn get_process_list(cpu: &mut CPUState) -> Option<Vec<CosiProc>> {
fn get_process_children(cpu: &mut CPUState, proc: &CosiProc) -> Option<Vec<CosiProc>> {
let mut ret = Vec::<CosiProc>::new();
let mut ts_current = proc.get_next_child(cpu)?;
match &ts_current.mm {
Some(res) => (),
None => return None,
}
let first_addr = ts_current.addr;
println!("First addr: {first_addr:x} | proc_addr: {:x}", proc.addr);
loop {
Expand All @@ -182,141 +188,140 @@ fn get_process_children(cpu: &mut CPUState, proc: &CosiProc) -> Option<Vec<CosiP
}
Some(ret)
}
//#[allow(dead_code)]
//fn print_current_cosiproc_info(cpu: &mut CPUState) -> bool {
// match CosiProc::get_current_cosiproc(cpu) {
// Some(res) => {
// if res.asid != 0 {
// println!("asid: {:x}", res.asid);
// } else {
// println!("asid: Err");
// }
// println!("start_time: {:x}", res.task.start_time);
// println!("name: {}", res.name);
// println!("pid, {:x}", res.task.pid);
// println!("ppid, {:x}", res.ppid);
// println!("taskd, {:x}", res.taskd);
// }
// None => println!("Could not read current proc"),
// };
// true
//}
//
//#[allow(dead_code)]
//fn print_current_cosithread_info(cpu: &mut CPUState) -> bool {
// match CosiThread::get_current_cosithread(cpu) {
// Some(res) => {
// println!("tid: {:x}", res.tid);
// println!("pid: {:x}", res.pid);
// }
// None => println!("Could not read current proc"),
// };
// true
//}
//
//#[allow(dead_code)]
//fn print_current_cosifile_info(cpu: &mut CPUState) -> bool {
// match CosiFiles::get_current_files(cpu) {
// Some(res) => {
// if let Some(fd1) = res.file_from_fd(1) {
// println!("fd 1 name: {}", fd1.name);
// }
//
// for i in res.files {
// println!("file name: {} | fd: {}", i.name, i.fd);
// }
// }
// None => println!("Could not read files from current proc"),
// }
// true
//}
//
//#[allow(dead_code)]
//fn print_current_cosimappings_info(cpu: &mut CPUState) -> bool {
// match CosiProc::get_current_cosiproc(cpu) {
// Some(res) => match res.get_mappings(cpu) {
// Some(mapping) => {
// for mdl in mapping.modules.iter() {
// println!(
// "modd: {:x} | base: {:x} | size: {:x} | file: {} | name: {}",
// mdl.modd, mdl.base, mdl.size, mdl.file, mdl.name
// )
// }
// }
// None => println!("Could not read memory mapping"),
// },
// None => println!("Could not read current process"),
// }
// true
//}
//
//#[allow(dead_code)]
//fn print_process_list(cpu: &mut CPUState) -> bool {
// match get_process_list(cpu) {
// Some(res) => {
// for i in res.iter() {
// println!("name: {} | pid: {}", i.name, i.task.pid);
// }
// }
// None => println!("No process list found"),
// };
//
// true
//}
//
//fn print_children(cpu: &mut CPUState) -> bool {
// match CosiProc::get_current_cosiproc(cpu) {
// Some(proc) => {
// println!(
// "[current] name: {} | pid: {} | ppid: {} | addr: {:x}",
// proc.name, proc.task.pid, proc.ppid, proc.addr
// );
// match get_process_children(cpu, &proc) {
// Some(children) => {
// for c in children.iter() {
// println!(
// "\t [child] name: {} | pid: {} | ppid: {}",
// c.name, c.task.pid, c.ppid
// );
// }
// std::process::exit(0);
// }
// None => println!("No Children (2003)"),
// }
// }
// None => println!("Could not get current process"),
// };
// true
//}
//static mut download: bool = false;
//
//#[panda::asid_changed]
//fn asid_changed(cpu: &mut CPUState, _old_asid: target_ulong, _new_asid: target_ulong) -> bool {
// //println!("\n\nOSI2 INFO START");
//
// // Manually testing the downloader functionality
// if unsafe { download } {
// println!("Downloading...");
// match download_symbol_table("look_at_me", "ubuntu:3.4.0-4-goldfish:32") {
// true => println!("Downloaded!"),
// false => {
// println!("Download failed, exiting");
// std::process::exit(1)
// }
// }
// unsafe {
// download = false;
// }
// }
//
// //print_current_cosiproc_info(cpu);
// //print_current_cosithread_info(cpu);
// //print_current_cosifile_info(cpu);
// //print_current_cosimappings_info(cpu);
// //print_process_list(cpu);
// //print_children(cpu);
//
// //println!("OSI2 INFO END\n\n");
//
// true
//}
#[allow(dead_code)]
fn print_current_cosiproc_info(cpu: &mut CPUState) -> bool {
match CosiProc::get_current_cosiproc(cpu) {
Some(res) => {
if res.asid != 0 {
println!("asid: {:x}", res.asid);
} else {
println!("asid: Err");
}
println!("start_time: {:x}", res.task.start_time);
println!("name: {}", res.name);
println!("pid, {:x}", res.task.pid);
println!("ppid, {:x}", res.ppid);
println!("taskd, {:x}", res.taskd);
}
None => println!("Could not read current proc"),
};
true
}

#[allow(dead_code)]
fn print_current_cosithread_info(cpu: &mut CPUState) -> bool {
match CosiThread::get_current_cosithread(cpu) {
Some(res) => {
println!("tid: {:x}", res.tid);
println!("pid: {:x}", res.pid);
}
None => println!("Could not read current proc"),
};
true
}

#[allow(dead_code)]
fn print_current_cosifile_info(cpu: &mut CPUState) -> bool {
match CosiFiles::get_current_files(cpu) {
Some(res) => {
if let Some(fd1) = res.file_from_fd(1) {
println!("fd 1 name: {}", fd1.name);
}

for i in res.files {
println!("file name: {} | fd: {}", i.name, i.fd);
}
}
None => println!("Could not read files from current proc"),
}
true
}

#[allow(dead_code)]
fn print_current_cosimappings_info(cpu: &mut CPUState) -> bool {
match CosiProc::get_current_cosiproc(cpu) {
Some(res) => match res.get_mappings(cpu) {
Some(mapping) => {
for mdl in mapping.modules.iter() {
println!(
"modd: {:x} | base: {:x} | size: {:x} | file: {} | name: {}",
mdl.modd, mdl.base, mdl.size, mdl.file, mdl.name
)
}
}
None => println!("Could not read memory mapping"),
},
None => println!("Could not read current process"),
}
true
}

#[allow(dead_code)]
fn print_process_list(cpu: &mut CPUState) -> bool {
match get_process_list(cpu) {
Some(res) => {
for i in res.iter() {
println!("name: {} | pid: {}", i.name, i.task.pid);
}
}
None => println!("No process list found"),
};

true
}

fn print_children(cpu: &mut CPUState) -> bool {
match CosiProc::get_current_cosiproc(cpu) {
Some(proc) => {
println!(
"[current] name: {} | pid: {} | ppid: {} | addr: {:x}",
proc.name, proc.task.pid, proc.ppid, proc.addr
);
match get_process_children(cpu, &proc) {
Some(children) => {
for c in children.iter() {
println!(
"\t [child] name: {} | pid: {} | ppid: {}",
c.name, c.task.pid, c.ppid
);
}
//std::process::exit(0);
}
None => println!("No Children (2003)"),
}
}
None => println!("Could not get current process"),
};
true
}
static mut download: bool = false;

#[panda::asid_changed]
fn asid_changed(cpu: &mut CPUState, _old_asid: target_ulong, _new_asid: target_ulong) -> bool {
println!("\n\nOSI2 INFO START");

// Manually testing the downloader functionality
if unsafe { download } {
println!("Downloading...");
match download_symbol_table("look_at_me", "ubuntu:3.4.0-4-goldfish:32") {
true => println!("Downloaded!"),
false => {
println!("Download failed, exiting");
std::process::exit(1)
}
}
unsafe {
download = false;
}
}

//print_current_cosiproc_info(cpu);
//print_current_cosithread_info(cpu);
//print_current_cosifile_info(cpu);
//print_current_cosimappings_info(cpu);
//print_process_list(cpu);
print_children(cpu);

println!("OSI2 INFO END\n\n");
true
}
Loading

0 comments on commit 7c8ebe1

Please sign in to comment.