Package vdb :: Package recon
[hide private]
[frames] | no frames]

Package recon

source code


The recon subsystem for monitoring well known library
calls and identifying dangerous calling mechanisms.

NOTE: This subsystem pretty much assumes some intel-like
conventions...

Recon Format Chars:
    A - A NULL terminated ascii string
    W - A NULL terminated utf-16le string
    P - A platform width pointer
    I - An integer (32 bits for now...)

Submodules [hide private]

Classes [hide private]
  ReconBreak
Functions [hide private]
 
reprargs(trace, fmt, args) source code
 
addReconBreak(trace, symname, reconfmt) source code
 
clearReconHits(trace)
Clear the current list of recon hits.
source code
 
getReconHits(trace)
Get the list of recon "hits" entries.
source code
Variables [hide private]
  __package__ = 'vdb.recon'
Function Details [hide private]

getReconHits(trace)

source code 

Get the list of recon "hits" entries. Each hit entry is a tuple of (threadid, savedeip, symname, argtup, argreprtup).