linuxthor/lkmim

Stars
4
Rank 3,304,323 (Top 66 %)
Language
C
Created over 6 years ago
Updated over 6 years ago

linuxthor/lkmim

linuxthor

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Load kernel module in memory

asm

assembly language examples, mostly Linux

uul

ELF binary that runs on several different *nix flavours. Works out which variant it's being run on and runs code specific to that.

iamdynamic

Linux assembly language minimal 'dynamic ELF' example plus experiments

rkspotter

Rootkit spotter - experimental Linux rootkit finder LKM

My-TTGO-Watch-Dev

How-to on making apps for My-TTGO-Watch

metalfinger

Linux kernel module to run a userspace application when a magic packet arrives

sixnix

Multifarious x86-64 ELF binary that can be built once and run on six different *nix variants. Behaves differently if running on Linux, BSD or SunOS

procsplice

Tool for working with memory of a running Linux process

rkbreaker

Rootkit breaker - experimental Linux anti-rootkit tool based on kprobes

kark

Experimental OpenBSD 6.7 rootkit

pam-happyhour2for1

Once a day it's happy hour! This Linux PAM module will give you root! Inspired by Brendan Gregg's pam_happy_hour.c for Solaris

camisado

Linux kernel module that sends a UDP packet without being seen by userspace

obnubilate

Linux kernel module that decrypts an AES encrypted payload from a magic packet

BsidesLeeds-eBPF

Presentation and demos from BSides Leeds presentation on eBPF for security monitoring

fml

LD_PRELOAD hack to save malloc and free operations in an sqlite database

shellsee

LD_PRELOAD hack to save shell commands in an sqlite database

OpenLSD

Assembly "Hello World" that runs on both Linux and OpenBSD

party-parrots

A Parrot Party for your terminal

slimpack

Toolkit for building encrypted file loaders for single source file NASM projects (uses AES-NI instructions)

StrangeELF

Material for the talk "Strange ELF" at DC151 13/2/2019

emptythreat

Linux proof of concept that loads and executes encrypted shellcode from extended file attributes

asmbonsai

Small (73 byte) 64 bit Linux assembly hello world

inode-ctime

Demo of altering inode ctime in kernel

sysrq-roulette

Adds a SysRq handler with random kernel panic. Do you feel lucky?

devzerothing

Overwriting pointers in a file_operations structure to hide a communication channel

bluetooth

Material from Bluetooth talks at dc151 and SteelCon. Includes a collection of public domain diagrams of Bluetooth classic in SVG.