-
Notifications
You must be signed in to change notification settings - Fork 0
Pedagogical project demonstrating basic syscalls hooks of a linux machine
License
AstraaDev/basic-lkm
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
Basic LKM (Linux Kernel Module) Pedagogical project demonstrating basic syscalls hooks of a linux machine. This project explores kernel development concepts, including system call interception and process stealth. It mainly reuses the remarkable work of @Xcellerator, adapted for current Kernel versions. Usage: $ make $ sudo insmod rootkit.ko ... $ kill -42 1 $ sudo rmmod rootkit Full documentation and detailed code explanations are available at : https://xcellerator.github.io/posts/linux_rootkits_01/ For additional technical details, see: * docs/ directory in this repository * Linux kernel docs
About
Pedagogical project demonstrating basic syscalls hooks of a linux machine