Page 5 of 8
Re: Injecting modules into exeDSP
Posted: Thu Nov 11, 2010 3:08 pm
by nbd
The pid of son (son of a pid!
sorry couldn't resist) should show the parent pid when you look at it with ps -ef. I guess the parent has pid 1 as parent.
Re: Injecting modules into exeDSP
Posted: Mon Nov 22, 2010 1:46 pm
by nostromo1983
I was just wondering, i've tested injectso with chaninfo and it seems working, but i don't see the module as loaded into the exeDSP add space. I mean if i do cat /proc/`pidof exeDSP`/maps, i cant see the injected module. On the opposite side, when i inject the module using the gdb trick, i can see it's loaded using the same command to see maps of the process. Why this? Is this normal, by design?
Re: Injecting modules into exeDSP
Posted: Mon Nov 22, 2010 4:35 pm
by erdem_ua
nostromo1983 wrote:I was just wondering, i've tested injectso with chaninfo and it seems working, but i don't see the module as loaded into the exeDSP add space. I mean if i do cat /proc/`pidof exeDSP`/maps, i cant see the injected module. On the opposite side, when i inject the module using the gdb trick, i can see it's loaded using the same command to see maps of the process. Why this? Is this normal, by design?
Good point. I wonder it now.