Joseph Doherty
fe2a6db786
rust / build / test / clippy / fmt (push) Has been cancelled
Layout:
- src/ .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
MxAsbClient, probes, tests, harnesses. Executable spec.
- design/ Architectural plan for the Rust port (M0–M6), error
model, protocol invariants, risks (R1–R16), adversarial
review log (review.md).
- rust/ Rust workspace. M0 skeleton + M1 codec parity.
mxaccess-codec: 215 unit tests + 2 cross-implementation
parity tests (byte-identical against .NET reference).
Other crates are M0 stubs awaiting M2+.
- captures/ Frida + netsh + pcap evidence per CLAUDE.md
("captures are evidence, not throwaway logs").
- analysis/ Decompiled C# (frida/proxy/decompiled-*),
Ghidra exports for native DLLs (`exports/` only —
working state at `projects/` and AVEVA's input
binaries at `input/` are gitignored).
- docs/ Reverse-engineering reference docs.
- tools/ Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/ Rust CI: fmt + build + test + clippy on Windows.
- LICENSE MIT (Joseph Doherty, 2026).
Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly
Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
19 lines
1.6 KiB
Plaintext
19 lines
1.6 KiB
Plaintext
process=x64:True
|
|
engine_id=32750
|
|
engine_name=MxNativeClient.Probe.30724
|
|
objref_context=2
|
|
objref_size=366
|
|
objref_hex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
|
|
objref_signature=0x574F454D
|
|
objref_flags=0x00000001
|
|
objref_iid=00000000-0000-0000-c000-000000000046
|
|
std_flags=0x00000000
|
|
std_public_refs=1
|
|
std_oxid=0xEAF0D2B53BAB5BC2
|
|
std_oid=0x4A33474469C4C51D
|
|
std_ipid=0000bc18-3678-0000-3318-0b1fd3ac70a5
|
|
dual_string_entries=149
|
|
dual_string_security_offset=127
|
|
dual_strings=string:0x0007:ncacn_ip_tcp:DESKTOP-6JL3KKO|string:0x0007:ncacn_ip_tcp:10.100.0.48|string:0x0007:ncacn_ip_tcp:172.29.224.1|string:0x0007:ncacn_ip_tcp:fde1:ae41:8a00:452a:bb41:ee7e:5fd4:dc18|string:0x0007:ncacn_ip_tcp:fde1:ae41:8a00:452a:501a:2da4:abd0:f50a|security:0x0009:ncacn_np:<ffff>|security:0x001e:unknown:<ffff>|security:0x0010:ncacn_nb_nb:<ffff>|security:0x000a:unknown:<ffff>|security:0x0016:ncadg_ip_udp_or_netbios:<ffff>|security:0x001f:ncalrpc:<ffff>|security:0x000e:unknown:<ffff>
|
|
objref_hold_seconds=60
|