h3xduck
|
0863566292
|
Included a global config struct for controlling which hooks and functions of the rootkit should be active. Still work to be done in the bpf side
|
2021-12-31 09:54:47 -05:00 |
|
h3xduck
|
be9cc95daa
|
Adapted makefile for user includes and new source files
|
2021-12-24 06:59:30 -05:00 |
|
h3xduck
|
745ec4e395
|
Updated project structure, and added new list for the next incoming feature.
|
2021-12-21 20:08:49 -05:00 |
|
h3xduck
|
a1119894cd
|
Made it work with an arbitrary length payload. Generalization with constants.h, now the PoC can be used for any shrinking/enlarging value. Discovered a very curious bug
|
2021-11-27 17:01:10 -05:00 |
|
h3xduck
|
72fddcac62
|
Finished adapting the code to tcp packets (+ researched a lot about xdp and ebpf, we should be OK with xdps, found a lot of ideas)
|
2021-11-23 19:55:44 -05:00 |
|
h3xduck
|
b04200526c
|
Finished xdp ebpf program, successfully showing packets received. Added client from Umbra, it will be the C&C client
|
2021-11-22 18:58:58 -05:00 |
|
h3xduck
|
23c7331d16
|
Continued working on first xdp filter, todo make bpf ring buffer work, check udp filter is up ans working
|
2021-11-21 20:00:43 -05:00 |
|
h3xduck
|
53da2d141d
|
Setup development environment with libbpf
|
2021-11-20 21:07:23 -05:00 |
|