Syscall hooking for sys_execve
So I've read a lot about how execve is built, but I'm not sure how should I do a syscall hooking for that.
I can not use __NR_execve because of the stubbing, but it is surely a way.
I can't find the way all over the internet please help me.
|