Qnote

Public notes

Common-knowledge notes available without an account.

Latest public notes

18 notes are visible in the public index.

publicc++ hello world反汇编

这是一段ARM64架构上的函数汇编代码。以下是逐行解释:

publicExpert-Level GDB Mastery Guide

I'll guide you through mastering GDB, building from core concepts to advanced techniques that distinguish expert-level debugging.

publichttps://developer.android.com/reference/android/view/KeyEvent#KEYCODE0publicAdb

通过 ADB(Android Debug Bridge) 连接上设备后,你可以执行许多操作,主要包括以下几大类:

publicArch Prctl

archprctl 是一个用于在 x86-64 架构上设置和获取线程特定寄存器 (FS 和 GS 寄存器) 值的系统调用。它通常在实现线程本地存储(TLS)或在操作系统内部进行某些低级别任务时使用。

publicReplace 12345 with actual decimal offset from grep -abo

Patching the binary so the default interface is Ethernet28 without recompiling: the default comes from the string "Ethernet1" (from KBRDDEFAULTIFNAME). Replace that string in the binary.

publicBPF CO-RE reference guide

Oct 24, 2021

publicBuilding BPF applications with libbpf-bootstrap

Nov 29, 2020

publicBPF CO-RE (Compile Once – Run Everywhere)

Feb 19, 2020

publicConcept

One of the most important structures in the kernel is the struct taskstruct, yet not the simplest one.

publicBreakpoints

To determine whether an address is in user space or kernel space, let's look at the address:

publicCrash Sample1

Hi,

publicWhite Paper: Crash Utility

by David Anderson

publicDbg And Dbgsym

-dbg 和 -dbgsym 都是用于提供 调试符号(debug symbols) 的,但它们的机制和用途有所不同:

publicDebugging kernel and modules via gdb

The kernel debugger kgdb, hypervisors like QEMU or JTAG-based hardware interfaces allow to debug the Linux kernel and its modules during runtime using gdb. Gdb comes with a powerful scripting interface for python. The kernel provides a coll

public[Linux Kernel Exploitation 0x0] Debugging the Kernel with QEMU

> Posted by Keith Makan November 10, 2020

publicDynamic debug

Dynamic debug allows you to dynamically enable/disable kernel debug-print code to obtain additional kernel information.

publicDemo1

The commands you provided are used to trace kernel events using the ftrace framework in the Linux kernel. Here is an explanation of what each command does and how to use them effectively.