Completed execution hijacking, completed first subsection of backdoor

docs/bibliography/bibliography.bib

@@ -668,6 +668,65 @@ AMD64 Architecture Processor Supplement},
 @online{busybox_argv,
 	title={BusyBox Examples},
 	url={https://en.wikipedia.org/wiki/BusyBox#Examples}
+},
+
+@online{ips,
+	title={What is an intrusion prevention system?},
+	organization={VMware},
+	url={https://www.vmware.com/topics/glossary/content/intrusion-prevention-system.html}
+},
+
+@online{port_knocking,
+	title={Port Knocking -- Network Authentication Across Closed Ports},
+	author={Martin Krzywinski},
+	url={https://www.muppetwhore.net/sysadmin/html/v12/i06/a2.htm}
+},
+
+@report{bvp47_report_p49,
+	institution = {Pangu Lab},
+	title = {Bvp47 Top-tier Backdoor of US NSA Equation Group},
+	date = {2022-02-23},
+	pages={49},
+	url = {https://www.pangulab.cn/files/The_Bvp47_a_top-tier_backdoor_of_us_nsa_equation_group.en.pdf}
+},
+
+@online{pangu_lab,
+	title={Welcome to Pangu Research Lab},
+	url={https://pangukaitian.github.io/pangu/?lg=en}
+},
+
+@online{rfc_tcp4,
+	title={TFC 793},
+	institution={Information Sciences Institute, University of Southern California},
+	date={1981-09-01},
+	url={https://datatracker.ietf.org/doc/html/rfc793}
+},
+
+@online{tcp_syn_payload,
+	title={TCP Fast Open: expediting web services},
+	date={2012-08-01},
+	author={Michael Kerrisk},
+	url={https://lwn.net/Articles/508865/}
+},
+
+@book{cisco_syn_firewall,
+	title={CCNP Security Firewall 642-617 Official Cert Guide},
+	date={2011-10-01},
+	author={David Hucaby, David Garneau, Anthony Sequeira},
+	page={436},
+	url={https://books.google.es/books?id=-lvwaqFbIS8C&dq=syn+packet+firewall+ignore+payload}
+},
+
+@online{hive_implant,
+	title={(U) Hive Engineering Development Guide},
+	date = {2014-10-15},
+	url={https://wikileaks.org/vault7/document/hive-DevelopersGuide/hive-DevelopersGuide.pdf}
+},
+
+@online{crc,
+	title={Cyclic redundancy check},
+	organization={Wikipedia},
+	url={https://en.wikipedia.org/wiki/Cyclic_redundancy_check}
 }