New diagrams, completed rootkit architecture

This commit is contained in:
h3xduck
2022-06-12 08:16:59 -04:00
parent c14b407644
commit 0aec74e024
15 changed files with 463 additions and 335 deletions

View File

@@ -1304,14 +1304,14 @@ INPUT images//cBPF_prog_ex_sol.png
INPUT ./images//cBPF_prog_ex_sol.png
INPUT ./images//cBPF_prog_ex_sol.png
INPUT /usr/share/texlive/texmf-dist/fonts/tfm/public/txfonts/t1xi.tfm
INPUT /usr/share/texlive/texmf-dist/fonts/vf/public/txfonts/t1xi.vf
INPUT /usr/share/texlive/texmf-dist/fonts/tfm/public/txfonts/rtxptmri.tfm
INPUT /usr/share/texlive/texmf-dist/fonts/tfm/public/txfonts/rtxi.tfm
INPUT ./images//ebpf_arch.jpg
INPUT ./images//ebpf_arch.jpg
INPUT images//ebpf_arch.jpg
INPUT ./images//ebpf_arch.jpg
INPUT ./images//ebpf_arch.jpg
INPUT /usr/share/texlive/texmf-dist/fonts/vf/public/txfonts/t1xi.vf
INPUT /usr/share/texlive/texmf-dist/fonts/tfm/public/txfonts/rtxptmri.tfm
INPUT /usr/share/texlive/texmf-dist/fonts/tfm/public/txfonts/rtxi.tfm
INPUT ./images//xdp_diag.jpg
INPUT ./images//xdp_diag.jpg
INPUT images//xdp_diag.jpg
@@ -1368,17 +1368,11 @@ INPUT ./images//stack.jpg
INPUT images//stack.jpg
INPUT ./images//stack.jpg
INPUT ./images//stack.jpg
INPUT ./chapters/chapter3.tex
INPUT ./chapters/chapter3.tex
INPUT ./chapters/chapter3.tex
INPUT ./chapters/chapter3.tex
INPUT ./chapters/chapter3.tex
INPUT chapters/chapter3.tex
INPUT ./chapters/chapter3.tex
INPUT ./chapters/chapter3.tex
INPUT ./chapters/chapter3.tex
INPUT ./chapters/chapter3.tex
INPUT chapters/chapter3.tex
INPUT ./images//stack_ret_hij_simple.jpg
INPUT ./images//stack_ret_hij_simple.jpg
INPUT images//stack_ret_hij_simple.jpg
INPUT ./images//stack_ret_hij_simple.jpg
INPUT ./images//stack_ret_hij_simple.jpg
INPUT /usr/share/texlive/texmf-dist/tex/latex/listings/lstlang1.sty
INPUT /usr/share/texlive/texmf-dist/tex/latex/listings/lstlang1.sty
INPUT /usr/share/texlive/texmf-dist/tex/latex/listings/lstlang1.sty
@@ -1393,47 +1387,6 @@ INPUT /usr/share/texlive/texmf-dist/fonts/tfm/public/txfonts/t1xbtt.tfm
INPUT /usr/share/texlive/texmf-dist/fonts/vf/public/txfonts/t1xr.vf
INPUT /usr/share/texlive/texmf-dist/fonts/tfm/public/txfonts/rtxptmr.tfm
INPUT /usr/share/texlive/texmf-dist/fonts/tfm/public/txfonts/rtxr.tfm
INPUT ./images//stack_scan_write_tech.jpg
INPUT ./images//stack_scan_write_tech.jpg
INPUT images//stack_scan_write_tech.jpg
INPUT ./images//stack_scan_write_tech.jpg
INPUT ./images//stack_scan_write_tech.jpg
INPUT ./images//frame.jpg
INPUT ./images//frame.jpg
INPUT images//frame.jpg
INPUT ./images//frame.jpg
INPUT ./images//frame.jpg
INPUT ./images//tcp_conn.jpg
INPUT ./images//tcp_conn.jpg
INPUT images//tcp_conn.jpg
INPUT ./images//tcp_conn.jpg
INPUT ./images//tcp_conn.jpg
INPUT ./images//tcp_retransmission.jpg
INPUT ./images//tcp_retransmission.jpg
INPUT images//tcp_retransmission.jpg
INPUT ./images//tcp_retransmission.jpg
INPUT ./images//tcp_retransmission.jpg
INPUT ./images//tcp_exfiltrate_retrans.jpg
INPUT ./images//tcp_exfiltrate_retrans.jpg
INPUT images//tcp_exfiltrate_retrans.jpg
INPUT ./images//tcp_exfiltrate_retrans.jpg
INPUT ./images//tcp_exfiltrate_retrans.jpg
INPUT ./chapters/chapter4.tex
INPUT ./chapters/chapter4.tex
INPUT ./chapters/chapter4.tex
INPUT ./chapters/chapter4.tex
INPUT ./chapters/chapter4.tex
INPUT chapters/chapter4.tex
INPUT ./chapters/chapter4.tex
INPUT ./chapters/chapter4.tex
INPUT ./chapters/chapter4.tex
INPUT ./chapters/chapter4.tex
INPUT chapters/chapter4.tex
INPUT ./images//stack_ret_hij_simple.jpg
INPUT ./images//stack_ret_hij_simple.jpg
INPUT images//stack_ret_hij_simple.jpg
INPUT ./images//stack_ret_hij_simple.jpg
INPUT ./images//stack_ret_hij_simple.jpg
INPUT ./images//buffer_overflow.jpg
INPUT ./images//buffer_overflow.jpg
INPUT images//buffer_overflow.jpg
@@ -1449,21 +1402,21 @@ INPUT ./images//ROPcompound.jpg
INPUT images//ROPcompound.jpg
INPUT ./images//ROPcompound.jpg
INPUT ./images//ROPcompound.jpg
INPUT ./images//rop_evil_ebpf_1.jpg
INPUT ./images//rop_evil_ebpf_1.jpg
INPUT images//rop_evil_ebpf_1.jpg
INPUT ./images//rop_evil_ebpf_1.jpg
INPUT ./images//rop_evil_ebpf_1.jpg
INPUT ./images//rop_evil_ebpf_2.jpg
INPUT ./images//rop_evil_ebpf_2.jpg
INPUT images//rop_evil_ebpf_2.jpg
INPUT ./images//rop_evil_ebpf_2.jpg
INPUT ./images//rop_evil_ebpf_2.jpg
INPUT ./images//rop_evil_ebpf_3.jpg
INPUT ./images//rop_evil_ebpf_3.jpg
INPUT images//rop_evil_ebpf_3.jpg
INPUT ./images//rop_evil_ebpf_3.jpg
INPUT ./images//rop_evil_ebpf_3.jpg
INPUT ./images//frame.jpg
INPUT ./images//frame.jpg
INPUT images//frame.jpg
INPUT ./images//frame.jpg
INPUT ./images//frame.jpg
INPUT ./images//tcp_conn.jpg
INPUT ./images//tcp_conn.jpg
INPUT images//tcp_conn.jpg
INPUT ./images//tcp_conn.jpg
INPUT ./images//tcp_conn.jpg
INPUT ./images//tcp_retransmission.jpg
INPUT ./images//tcp_retransmission.jpg
INPUT images//tcp_retransmission.jpg
INPUT ./images//tcp_retransmission.jpg
INPUT ./images//tcp_retransmission.jpg
INPUT ./images//sch_gdb_plt.png
INPUT ./images//sch_gdb_plt.png
INPUT images//sch_gdb_plt.png
@@ -1484,6 +1437,63 @@ INPUT ./images//sch_glibc_func.png
INPUT images//sch_glibc_func.png
INPUT ./images//sch_glibc_func.png
INPUT ./images//sch_glibc_func.png
INPUT ./chapters/chapter3.tex
INPUT ./chapters/chapter3.tex
INPUT ./chapters/chapter3.tex
INPUT ./chapters/chapter3.tex
INPUT ./chapters/chapter3.tex
INPUT chapters/chapter3.tex
INPUT ./chapters/chapter3.tex
INPUT ./chapters/chapter3.tex
INPUT ./chapters/chapter3.tex
INPUT ./chapters/chapter3.tex
INPUT chapters/chapter3.tex
INPUT ./images//stack_scan_write_tech.jpg
INPUT ./images//stack_scan_write_tech.jpg
INPUT images//stack_scan_write_tech.jpg
INPUT ./images//stack_scan_write_tech.jpg
INPUT ./images//stack_scan_write_tech.jpg
INPUT ./images//tcp_exfiltrate_retrans.jpg
INPUT ./images//tcp_exfiltrate_retrans.jpg
INPUT images//tcp_exfiltrate_retrans.jpg
INPUT ./images//tcp_exfiltrate_retrans.jpg
INPUT ./images//tcp_exfiltrate_retrans.jpg
INPUT ./chapters/chapter4.tex
INPUT ./chapters/chapter4.tex
INPUT ./chapters/chapter4.tex
INPUT ./chapters/chapter4.tex
INPUT ./chapters/chapter4.tex
INPUT chapters/chapter4.tex
INPUT ./chapters/chapter4.tex
INPUT ./chapters/chapter4.tex
INPUT ./chapters/chapter4.tex
INPUT ./chapters/chapter4.tex
INPUT chapters/chapter4.tex
INPUT ./images//rootkit.jpg
INPUT ./images//rootkit.jpg
INPUT images//rootkit.jpg
INPUT ./images//rootkit.jpg
INPUT ./images//rootkit.jpg
INPUT ./images//rootkit_files.jpg
INPUT ./images//rootkit_files.jpg
INPUT images//rootkit_files.jpg
INPUT ./images//rootkit_files.jpg
INPUT ./images//rootkit_files.jpg
INPUT ./images//rop_evil_ebpf_1.jpg
INPUT ./images//rop_evil_ebpf_1.jpg
INPUT images//rop_evil_ebpf_1.jpg
INPUT ./images//rop_evil_ebpf_1.jpg
INPUT ./images//rop_evil_ebpf_1.jpg
INPUT ./images//rop_evil_ebpf_2.jpg
INPUT ./images//rop_evil_ebpf_2.jpg
INPUT images//rop_evil_ebpf_2.jpg
INPUT ./images//rop_evil_ebpf_2.jpg
INPUT ./images//rop_evil_ebpf_2.jpg
INPUT ./images//rop_evil_ebpf_3.jpg
INPUT ./images//rop_evil_ebpf_3.jpg
INPUT images//rop_evil_ebpf_3.jpg
INPUT ./images//rop_evil_ebpf_3.jpg
INPUT ./images//rop_evil_ebpf_3.jpg
INPUT ./images//aslr_offset.jpg
INPUT ./images//aslr_offset.jpg
INPUT images//aslr_offset.jpg
@@ -1519,6 +1529,11 @@ INPUT chapters/chapter6.tex
INPUT /usr/share/texlive/texmf-dist/fonts/tfm/public/txfonts/tcxi.tfm
INPUT /usr/share/texlive/texmf-dist/fonts/vf/public/txfonts/tcxi.vf
INPUT /usr/share/texlive/texmf-dist/fonts/tfm/public/txfonts/rtcxi.tfm
INPUT /usr/share/texlive/texmf-dist/fonts/vf/public/txfonts/txmi.vf
INPUT /usr/share/texlive/texmf-dist/fonts/tfm/public/txfonts/rtxmi.tfm
INPUT /usr/share/texlive/texmf-dist/fonts/tfm/public/txfonts/rtxptmri.tfm
INPUT /usr/share/texlive/texmf-dist/fonts/vf/public/txfonts/txmi.vf
INPUT /usr/share/texlive/texmf-dist/fonts/tfm/public/txfonts/rtxmi.tfm
INPUT ./chapters/annex.tex
INPUT ./chapters/annex.tex
INPUT ./chapters/annex.tex