Rootkit

DETECTION

KPROBES

CR0-WP x86 (WRITE-PROTECTION)

MODIFY PROCESS CREDENTIALS

https://xcellerator.github.io/tags/rootkit/

https://web.archive.org/web/20160620231623/http://big-daddy.fr/repository/Documentation/Hacking/Security/Malware/Rootkits/writing-rootkit.txt

https://reveng007.github.io/blog/2022/03/08/reveng_rkit_detailed.html

LKM

http://www.ouah.org/LKM_HACKING.html

HOOKING

http://jbremer.org/x86-api-hooking-demystified/#ah-abstract

https://www.codeproject.com/Articles/1273948/Hooking-Linux-Kernel-Functions-Part-1-Looking-for

LKM - Hide files/procs:

https://jm33.me/linux-rootkit-for-fun-and-profit-0x02-lkm-hide-filesprocs.html

🌱 Back to Garden