Learning C purpose
Malicious LKM, simple rootkit for studiying purpose [...].
kernel ver. | state |
---|---|
5.10 |
affected |
4.19 |
affected |
4.15 |
affected |
4.9 |
affected |
Install linux headers for your version, check it with uname -r
.
With apt (debian, ...)
sudo apt install linux-headers-$(uname -r)
With dnf (fedora, ...)
sudo dnf install kernel-headers
Install with
sudo make
For debug mode (verbose)
sudo make debug
For cleaning
sudo make clean
malefik redirect some kill signals to do something special things for you UwU.
Such as
kill -64 <pid> : Escalate to root shell.
kill -31 <pid> : Hide/unhide process.
kill -32 1 : Hide and protect malefik rootkit.
kill -33 1 : Unhide and unprotect malefik rootkit.