h3xduck
|
2b50d376a6
|
Updated function and configurator manager names to the used hook.
|
2022-01-26 13:04:23 -05:00 |
|
h3xduck
|
3832d99af1
|
Updated file names and directory structure to the new multi-modules rootkit
|
2022-01-16 06:56:54 -05:00 |
|
h3xduck
|
945e2f2def
|
Added new probe to read the previously extracted params and overwrite user memory. Still now fully working, just a backup
|
2022-01-14 22:05:08 -05:00 |
|
h3xduck
|
f8774ac9cf
|
[BUILD IS FAILING] Added file system hooks and other improvements. Uploading because of needing to backup
|
2022-01-04 20:09:59 -05:00 |
|
h3xduck
|
74873dbca5
|
Completed configuration module which enables to change the running ebpf modules in the rootkit at runtime. Minor changes and updated code structure
|
2022-01-04 13:26:13 -05:00 |
|
h3xduck
|
adaf909781
|
Completed detachment of probes, enabling to attach and detach at will. Work needs to be done with xdp tho
|
2022-01-02 06:28:45 -05:00 |
|
h3xduck
|
d18b0aa23c
|
Further improvements in the rootkit configuration by the user
|
2021-12-31 12:02:35 -05:00 |
|
h3xduck
|
0863566292
|
Included a global config struct for controlling which hooks and functions of the rootkit should be active. Still work to be done in the bpf side
|
2021-12-31 09:54:47 -05:00 |
|
h3xduck
|
d9a70f866c
|
Modularized the ebpf program loading and attaching.
|
2021-12-30 21:09:26 -05:00 |
|