@skullsecurity @iagox86 Nice post. For the srand stuff, since I try to avoid patching binaries, I tend to use LD_PRELOAD with a custom library with a nop-srand, or maybe a `rand` that always returns the same value.

This lets you do some extra stuff as well, such as logging every time it's called.