6 Commits (0d0ae22a9802aae025296680aa1a7b2dd3cb8c73)

Author	SHA1	Message	Date
PeanutSplash	30112b9a10	fix(linux): address code review feedback ... - SUDO_USER: skip fallback entirely when user is invalid (KeyError) - load_config: move default merge after db_dir check to avoid dead code - _is_wechat_process: prefer exact comm match, use exe substring as fallback	2026-03-07 21:35:24 +08:00
PeanutSplash	3d58b6508c	fix(linux): validate SUDO_USER and use prefix matching for interpreters ... - Validate SUDO_USER via pwd.getpwnam() to prevent path injection - Use prefix matching for interpreter detection to cover python3.10+ etc. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-07 21:35:24 +08:00
PeanutSplash	bf77cc97d8	refactor(linux): improve wechat detection and sudo db path fallback	2026-03-07 21:35:24 +08:00
PeanutSplash	6d9b2c0fe4	refactor(find_all_keys): extract shared key scan logic	2026-03-07 21:35:24 +08:00
PeanutSplash	872e3f58dc	fix: handle exited PIDs and narrow message DB keys	2026-03-07 21:35:24 +08:00
PeanutSplash	f9c338b48d	feat: add Linux support with cross-platform memory scanning ... - Add Linux memory scanner (`find_all_keys_linux.py`) using `/proc/<pid>/mem`, same approach as Windows/macOS — no GDB, no function offsets, no restart needed - Extract Windows-specific code to `find_all_keys_windows.py` - Make `find_all_keys.py` a platform dispatcher (Windows / Linux) - Add `key_utils.py` for cross-platform path matching (`/` vs `\` in all_keys.json) - Update `config.py` with Linux auto-detection of db_storage paths - Update all consumers (decrypt_db, monitor, monitor_web, mcp_server) to use `get_key_info()` for platform-agnostic key lookup Tested on remote Linux container: 15/15 DBs scanned, decrypted, and verified.	2026-03-07 21:35:24 +08:00