Tracing Struct Accesses with Struct Stalker

Tracing Struct Accesses with Struct Stalker

Explore Struct Stalker, an LLDB script for tracing struct/object accesses in C/C++ applications, in this 31-minute conference talk from Recon 2018 Montreal. Learn how the tool recursively walks through targeted variable fields, making them inaccessible through page permissions, and processes page faults to track memory accesses. Gain insights into LLDB scripting, including useful techniques not covered in official documentation. Presented by Jeff Dileo, a security consultant specializing in embedded systems, mobile apps, web apps, and complex unnamed technologies.