h3xduck 5320f35d01 Added new hidden payload stream mode, now triggered using the source port. Fully integrated already, can select between that and seqnum in client. Both launch live encrypted shell via v3 backdoor

2022-05-09 20:16:13 -04:00

..

defs.h

Added new hidden payload stream mode, now triggered using the source port. Fully integrated already, can select between that and seqnum in client. Both launch live encrypted shell via v3 backdoor

2022-05-09 20:16:13 -04:00

exec.h

Finished execve hijacking, added new last checks and discovered why sometimes it fails. New detached process at the userspace. Other fixes

2022-05-07 10:36:46 -04:00

fs.h

Added new TC module, updates to the exec hooking system and the userland module

2022-02-20 16:50:15 -05:00

sched.h

Added new kprobe to the filesystem ebpf section. Now receiving read events, and storing them in a map for later use, along with a reference to the user-space memory buffer

2022-01-14 21:18:51 -05:00

tc.c

Advancements on payload recognition. Now proceeding to build protocol

2022-04-14 07:54:21 -04:00