Linux signals

Implementing Anti-Debugging on Android Using Linux Signal Mechanism (SIGTRAP)

by
Implementing Anti-Debugging on Android Using Linux Signal Mechanism (SIGTRAP)

Copyright belongs to the author. If reposting, please indicate the source: https://cyrus-studio.github.io/blog/ Using SIGTRAP to Detect Debuggers In Linux process management, signals are the core mechanism for communication between the debugger and the debugged process. Operations such as breakpoints, single-step execution, and process suspension and resumption rely on the transmission of specific signals. Among these, … Read more

Implementing Anti-Debugging in Android Using Linux Signal Mechanism (SIGTRAP)

by
Implementing Anti-Debugging in Android Using Linux Signal Mechanism (SIGTRAP)

Copyright belongs to the author. If reprinted, please indicate the source: https://cyrus-studio.github.io/blog/ Using SIGTRAP to Detect Debuggers In the process management of Linux, signals are the core mechanism for communication between the debugger and the debugged process. Operations such as breakpoints, single-step execution, and process suspension and resumption all rely on the transmission of specific … Read more

Discussing the Linux Signal Mechanism in .NET Dumps

by
Discussing the Linux Signal Mechanism in .NET Dumps

1. Background 1. Storytelling When a <span>.NET application</span> crashes on Linux, we can configure some references to obtain the corresponding core file. After obtaining the core file, we can open it with windbg, and often see a message like this: <span>Signal SIGABRT code SI_USER (Sent by kill, sigsend, raise)</span>, as shown below: (1.1d): Signal SIGABRT … Read more