python-ptrace

python-ptrace is a debugger using ptrace (Linux, BSD and Darwin system call to trace processes) written in Python.

python-ptrace is an open source project written in Python and distributed under GNU GPLv2 license.

Features:

• High level Python object API : PtraceDebugger and PtraceProcess
• Able to control multiple processes: catch fork events on Linux
• Read/write bytes to arbitrary address: take care of memory alignment and split bytes to cpu word
• Execution step by step using ptrace_singlestep() or hardware interruption 3
• Can use distorm disassembler
• Dump registers, memory mappings, stack, etc.
• Syscall tracer and parser (strace.py command)

What is new in this release:

• Support distrom3
• Support Python 3
• Rename strace.py option --socketcall to --socket, and fix this option for FreeBSD and Linux/64 bits
• Add MANIFEST.in: include all files in source distribution (tests, cptrace module, ...)

What is new in version 0.6.2:

• Fix 64 bits sub registers (set mask for eax, ebx, ecx, edx)

What is new in version 0.6.1:

• Create follow, showfollow, resetfollow, xray commands in gdb.py. Patch written by Dimitris Glynos
• Project website moved to http://bitbucket.org/haypo/python-ptrace/

What is new in version 0.6:

• User visible changes:
• python-ptrace now depends on Python 2.5
• Invalid memory access: add fault address in the name
• Update Python 3.0 conversion patch
• Create -i (--show-ip) option to strace.py: show instruction pointer
• Add a new example (itrace.py) written by Mark Seaborn and based on strace.py
• API changes:
• PtraceSyscall: store the instruction pointer at syscall enter (if the option instr_pointer=True, disabled by default)
• Remove PROC_DIRNAME and procFilename() from ptrace.linux_proc
• Bugfixes:
• Fix locateProgram() for relative path
• Fix interpretation of memory fault on MOSVW instruction (source is ESI and destination is EDI, and not the inverse!)

What is new in version 0.5:

• Parse socket syscalls for FreeBSD
• Avoid creation of zombi process on FreeBSD
• Most basic Windows support

Requirements:

• Python