Initial project state: .NET reference, design, Rust port (M0+M1), evidence
rust / build / test / clippy / fmt (push) Has been cancelled
rust / build / test / clippy / fmt (push) Has been cancelled
Layout:
- src/ .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
MxAsbClient, probes, tests, harnesses. Executable spec.
- design/ Architectural plan for the Rust port (M0–M6), error
model, protocol invariants, risks (R1–R16), adversarial
review log (review.md).
- rust/ Rust workspace. M0 skeleton + M1 codec parity.
mxaccess-codec: 215 unit tests + 2 cross-implementation
parity tests (byte-identical against .NET reference).
Other crates are M0 stubs awaiting M2+.
- captures/ Frida + netsh + pcap evidence per CLAUDE.md
("captures are evidence, not throwaway logs").
- analysis/ Decompiled C# (frida/proxy/decompiled-*),
Ghidra exports for native DLLs (`exports/` only —
working state at `projects/` and AVEVA's input
binaries at `input/` are gitignored).
- docs/ Reverse-engineering reference docs.
- tools/ Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/ Rust CI: fmt + build + test + clippy on Windows.
- LICENSE MIT (Joseph Doherty, 2026).
Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly
Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -0,0 +1,6 @@
|
||||
{"event":"script.loaded","process":13944,"arch":"ia32","pointerSize":4,"time":"2026-04-25T15:58:37.863Z"}
|
||||
{"event":"hook.installed","module":"oleaut32.dll","name":"BSTR_UserMarshal","address":"0x757a42e0","time":"2026-04-25T15:58:37.863Z"}
|
||||
{"event":"hook.installed","module":"rpcrt4.dll","name":"NdrInterfacePointerMarshall","address":"0x7704d450","time":"2026-04-25T15:58:37.863Z"}
|
||||
{"event":"hook.installed","module":"rpcrt4.dll","name":"NdrClientCall2","address":"0x76fc5700","time":"2026-04-25T15:58:37.864Z"}
|
||||
{"event":"hook.installed","module":"rpcrt4.dll","name":"NdrProxySendReceive","address":"0x7704f630","time":"2026-04-25T15:58:37.864Z"}
|
||||
{"event":"hook.installed","module":"rpcrt4.dll","name":"I_RpcSendReceive","address":"0x76ffc2f0","time":"2026-04-25T15:58:37.865Z"}
|
||||
@@ -0,0 +1,14 @@
|
||||
process=x64:True
|
||||
engine_id=29449
|
||||
engine_name=MxManagedComProxyTrace
|
||||
managed_callback_exporter_port=53528
|
||||
managed_callback_objref_size=366
|
||||
managed_callback_objref_hex=4D454F5701000000F7929FB448C769418ECAA0670B012746800A000005000000D0B5F9BAA50B15CB535E042E18C1523F020C00000898FFFF0A3CABC64661BFF995007F0007004400450053004B0054004F0050002D0036004A004C0033004B004B004F0000000700310030002E003100300030002E0030002E0034003800000007003100370032002E00320039002E003200320034002E0031000000070066006400650031003A0061006500340031003A0038006100300030003A0034003500320061003A0062006200340031003A0065006500370065003A0035006600640034003A0064006300310038000000070066006400650031003A0061006500340031003A0038006100300030003A0034003500320061003A0035003000620031003A0038003400360066003A0037006200350031003A006500610034003000000000000900FFFF00001E00FFFF00001000FFFF00000A00FFFF00001600FFFF00001F00FFFF00000E00FFFF00000000
|
||||
managed_register2_callback_request_size=480
|
||||
managed_register2_callback_stub_size=16
|
||||
managed_register2_callback_stub_hex=00000000000000000000000000000000
|
||||
managed_register2_callback_hresult=0x00000000
|
||||
managed_callback_connect_self_hresult=0x00000000
|
||||
managed_callback_add_self_subscriber_hresult=0x00000000
|
||||
managed_callback_self_transfer_hresult=0x00000000
|
||||
managed_unregister_after_callback_register_hresult=0x00000000
|
||||
Reference in New Issue
Block a user