mandiant / capa-rules

Standard collection of rules for capa: the tool for enumerating the capabilities of programs
https://github.com/mandiant/capa/
Apache License 2.0
514 stars 157 forks source link

Linux: Hook library function using dlsym with RTLD_NEXT #868

Closed williballenthin closed 7 months ago

williballenthin commented 7 months ago

https://stackoverflow.com/questions/71695007/hook-library-function-using-custom-method-using-dlsym https://liveoverflow.com/hooking-on-linux-with-ld_preload-pwn-adventure-3/

dlsym(-1, ...)