proc-view

Process analysis tool for Linux.

I work on this project to learn more about Linux and modern C++.
I am always open to suggestions, feel free to create a GitHub issue.

Features

• List information about running processes
• Find null-terminated strings in process memory
• Memory scanner
• Memory editor
• Lua scripting API for custom user scripts

TODO

• Detection of runtime patches in executable sections
  • Info about suspected hooks -> e.g. follow jmp
• Disassemble machine code at specified address
• Entropy calculation
• Debugging functionality
• eBPF program for process observation in kernel mode
• Add GTest

Build

cmake --preset release

cmake --build build-release

Dependencies

All dependencies besides Qt will be automatically installed via vcpkg.

• sol2
• Lua
• Qt6 (Set QT_ROOT environment variable to your installation directory)

References

• procfs man page
• procfs maps man page
• pfs by dtrugman
• Yama security module