h3xduck 7157729334 Added forked routine to execve_hijack. Improved argv modification and made it work. Working now.

2022-04-13 08:57:33 -04:00

..

bpf

Added forked routine to execve_hijack. Improved argv modification and made it work. Working now.

2022-04-13 08:57:33 -04:00

data

Added new kprobe to the filesystem ebpf section. Now receiving read events, and storing them in a map for later use, along with a reference to the user-space memory buffer

2022-01-14 21:18:51 -05:00

packet

Completed client integration with new c&c module.

2022-02-17 06:21:09 -05:00

utils

Initial version of the RCE scheme- Added complete execve hook, helper and modifying capabilities for the filename called. Works still needs to be done

2022-02-06 14:15:57 -05:00

xdp

Added new kprobe to the filesystem ebpf section. Now receiving read events, and storing them in a map for later use, along with a reference to the user-space memory buffer

2022-01-14 21:18:51 -05:00