One Hat Cyber Team

Your IP : 216.73.216.80

Server IP : 194.44.31.54

Server : Linux zen.imath.kiev.ua 4.18.0-553.77.1.el8_10.x86_64 #1 SMP Fri Oct 3 14:30:23 UTC 2025 x86_64

Server Software : Apache/2.4.37 (Rocky Linux) OpenSSL/1.1.1k

PHP Version : 5.6.40

View File Name : sysc_gethostname.stp

# gethostname ________________________________________________
# long sys_gethostname(char __user *name, int len)

@define _SYSCALL_GETHOSTNAME_NAME
%(
	name = "gethostname"
%)

@define _SYSCALL_GETHOSTNAME_ARGSTR
%(
	argstr = sprintf ("%p, %d", name_uaddr, len)
%)

probe syscall.gethostname = dw_syscall.gethostname !, nd_syscall.gethostname ? {}
probe syscall.gethostname.return = dw_syscall.gethostname.return !, nd_syscall.gethostname.return ? {}

# dw_gethostname _____________________________________________________

probe dw_syscall.gethostname = kernel.function("sys_gethostname").call ?
{
	@_SYSCALL_GETHOSTNAME_NAME
	name_uaddr = $name
	len = __int32($len)
	@_SYSCALL_GETHOSTNAME_ARGSTR
}
probe dw_syscall.gethostname.return = kernel.function("sys_gethostname").return ?
{
	@_SYSCALL_GETHOSTNAME_NAME
	@SYSC_RETVALSTR($return)
}

# nd_gethostname _____________________________________________________

probe nd_syscall.gethostname = kprobe.function("sys_gethostname") ?
{
	@_SYSCALL_GETHOSTNAME_NAME
	asmlinkage()
	name_uaddr = pointer_arg(1)
	len = int_arg(2)
	@_SYSCALL_GETHOSTNAME_ARGSTR
}
probe nd_syscall.gethostname.return = kprobe.function("sys_gethostname").return ?
{
	@_SYSCALL_GETHOSTNAME_NAME
	@SYSC_RETVALSTR(returnval())
}