[ SEA-GHOST MINI SHELL]
/*
This probe will fire when the perl script enters a subroutine.
*/
probe perl.sub.call = process("/usr/lib64/perl5/CORE/libperl.so").mark("sub__entry")
{
sub = user_string($arg1)
filename = user_string($arg2)
lineno = $arg3
package = user_string($arg4)
}
/*
This probe will fire when the return from a subroutine has been
hit.
*/
probe perl.sub.return = process("/usr/lib64/perl5/CORE/libperl.so").mark("sub__return")
{
sub = user_string($arg1)
filename = user_string($arg2)
lineno = $arg3
package = user_string($arg4)
}
/*
This probe will fire when the Perl interperter changes state.
*/
probe perl.phase.change = process("/usr/lib64/perl5/CORE/libperl.so").mark("phase__change")
{
newphase = user_string($arg1)
oldphase = user_string($arg2)
}
SEA-GHOST - SHELL CODING BY SEA-GHOST