tdeerenberg/InlineWhispers3
1
1
Fork 0
mirror of https://github.com/tdeerenberg/InlineWhispers3.git synced 2025-07-17 00:44:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Thijn
2025-04-08 17:36:36 +02:00
committed by GitHub
parent 0e1b5ae780
commit 2876b26e71
1 changed files with 9 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
README.md
View File

@ -3,24 +3,21 @@ InlineWhispers3 is an updated version of [InlineWhispers2](https://github.com/Sh
## How to set this up and run this? ## How to set this up and run this?
> At the moment of writing this, the latest SysWhispers3 commit is [`31cfc93`](https://github.com/klezVirus/SysWhispers3/commit/31cfc93c9466b52ae79d60925b0b5e0a1f653b88), from Dec 23, 2023
```sh 1. Clone the repo to your device
# Clone the repo to your device 2. Generate stubs with SysWhispers3
git clone https://github.com/tdeerenberg/InlineWhispers3 3. Make SysWhispers3 output BOF compatible
cd InlineWhispers3
# Generate stubs with SysWhispers3 See commands:
cd SysWhispers3/ ```bash
python3 syswhispers.py -p all -a x64 -m jumper -o syscalls_all git clone https://github.com/tdeerenberg/InlineWhispers3 && cd InlineWhispers3
cd SysWhispers3/ && python3 syswhispers.py -p all -a x64 -m jumper -o syscalls_all && cd ..
# Make SysWhispers3 output BOF compatible
cd ..
python3 InlineWhispers3.py --aio python3 InlineWhispers3.py --aio
``` ```
This generates the required syscalls.c/h files and then runs InlineWhispers3 to make the files compatible with BOFs. This generates the required syscalls.c/h files and then runs InlineWhispers3 to make the files compatible with BOFs.
> At the moment of writing this, the latest SysWhispers3 commit [`31cfc93`](https://github.com/klezVirus/SysWhispers3/commit/31cfc93c9466b52ae79d60925b0b5e0a1f653b88) is used, from Dec 23, 2023 <br><br>
> The `--aio` flag is optional and merges all output files into one `.h` file, which can also be used instead of using `syscalls.c`, `syscalls.h`, and `syscalls-asm.h` > The `--aio` flag is optional and merges all output files into one `.h` file, which can also be used instead of using `syscalls.c`, `syscalls.h`, and `syscalls-asm.h`
## How to use indirect syscalls in your BOF ## How to use indirect syscalls in your BOF
@ -54,4 +51,4 @@ void go(char* args, int length) {
- [@klezVirus](https://github.com/klezVirus) for SysWhispers3 - [@klezVirus](https://github.com/klezVirus) for SysWhispers3
- [@Sh0ckFR](https://github.com/Sh0ckFR) for InlineWhispers2 - [@Sh0ckFR](https://github.com/Sh0ckFR) for InlineWhispers2
- [@outflanknl](https://github.com/outflanknl) for the first version of InlineWhispers and their informative blog post about it - [@outflanknl](https://github.com/outflanknl) for the first version of InlineWhispers and their informative blog post about it
- The Cyber Security Community for all the articles and resources - The Cyber Security Community for all the articles and resources