SNEK Stack

What is it you ask? It's a minimal native stack inspect utility in pure C.

Build targets

• sstackl64 - Linux ELF x86_64 build
• sstackm64 - macOS Mach-O x86_64 build
• sstack64.exe - Windows PE x86_64 build

Build on Windows

gcc -Os -s -o sstack64.exe main.c sstack_common.c sstack_windows.c

Build on Linux

gcc -Os -s -o sstackl64 main.c sstack_common.c sstack_linux.c

Build on macOS

clang -Os -s -o sstackm64 main.c sstack_common.c sstack_macos.c

Usage

./sstackl64 --pid <pid>
./sstackm64 --pid <pid>
sstack64.exe --pid <pid>

or without the --pid flag:

./sstackl64 <pid>
# etc...

there is also the --json flag:

./sstackl64 --json [OPTIONAL: --pid] <pid>
# etc...

Shrimple, really.

A dump file is written as stack_<PID>_YYYYMMDD_HHMMSS.txt in the current directory.

Notes

• This repository give you a portable source files, with platform-specific release binaries produced per OS.
• Linux targets produce ELF executables.
• macOS targets produce Mach-O executables.
• Windows targets produce PE/COFF executables.

But tbf, if you are already here I hope that was common knowledge.

Notes from author

Needs work, will return to it in a reasonable amount of time, we have other projects to finish currently, but people will start working on it poretty soon.

Long live freeware, ATroubledSnake