Pull requests are welcomed.

• Try to run the given injection techniques code.
• Understand how each technique works
• Understand the attack vector and the different parts (stages) of the chain
  (i.e the bridgehead shellcode, injection to process memory,LPE, when to create a new process etc.)
• Describe the need for a custom statically PIC compiled elf (Shared object library) loader shellcode.
• Injection vs patching at runtime?
• Implement / imporve it by yourself.

Research Papers and Articles

• Linkers & Loaders by John R. Levine (1999)
• Using procfs to execute ELF without touching the disk
• The Nexus between Static and Position Independent Code
• Enabling SHELF Loading in Chrome for fun and profit
• General Linux Process injection techniques

Projects and Code Repositories

2023

• Playstation5 ELF Manipulation

2022

• NASM Linux x86_64 Pure Shared Library

2018

• ARM: SamyGOso Next-Gen
  • Based on 2014 ARM: HideAndroidEmulator ADBI Hook System Call
• Reflective Injection for Linux

2017

• DarkElf - Linux ELF Injector

2016

• XHook JNI Hijack
• ReflectiveSOInjection

2014

• Insecurity - Elves for Linux

Appendix / Somewhat Related / Need to organize

2018

• Saruman ELF Virus

Miscellaneous

• ElfMaster - ELF Internals projects (Injection, Patching etc.)

• DEF CON 31 - Revolutionizing ELF binary patching w Shiva - ElfMaster

• CVE-2022-34918 Shellcode Generation

• DDexec - Linux Binary Execution Technique

• bhook - Android PLT Hook Library

• vfsfitvnm/intruducer

• arget13/memdlopen

• Shared Library Injection in Android

• Shellcode Android Internals CTF ex4

• Paper: 46043 - Android System Tracing: A Real-Life Story

• ELF Shared Library Injection Forensics