One Hat Cyber Team

Your IP : 216.73.216.14

Server IP : 194.44.31.54

Server : Linux zen.imath.kiev.ua 4.18.0-553.77.1.el8_10.x86_64 #1 SMP Fri Oct 3 14:30:23 UTC 2025 x86_64

Server Software : Apache/2.4.37 (Rocky Linux) OpenSSL/1.1.1k

PHP Version : 5.6.40

View File Name : sysc_tux.stp

# tux ________________________________________________________
# long sys_tux (unsigned int action, user_req_t *u_info)
#

@define _SYSCALL_TUX_NAME
%(
	name = "tux"
%)

@define _SYSCALL_TUX_ARGSTR
%(
	argstr = sprintf("%d, %p", action, u_info_uaddr)
%)

probe syscall.tux = dw_syscall.tux !, nd_syscall.tux ? {}
probe syscall.tux.return = dw_syscall.tux.return !, nd_syscall.tux.return ? {}

# dw_tux _____________________________________________________

probe dw_syscall.tux = kernel.function("sys_tux").call ?
{
	@_SYSCALL_TUX_NAME
	action = $action
	u_info_uaddr = $u_info
	@_SYSCALL_TUX_ARGSTR
}
probe dw_syscall.tux.return = kernel.function("sys_tux").return ?
{
	@_SYSCALL_TUX_NAME
	@SYSC_RETVALSTR($return)
}

# nd_tux _____________________________________________________

probe nd_syscall.tux = kprobe.function("sys_tux") ?
{
	@_SYSCALL_TUX_NAME
	asmlinkage()
	action = uint_arg(1)
	u_info_uaddr = pointer_arg(2)
	@_SYSCALL_TUX_ARGSTR
}
probe nd_syscall.tux.return = kprobe.function("sys_tux").return ?
{
	@_SYSCALL_TUX_NAME
	@SYSC_RETVALSTR(returnval())
}