h3xduck 0fbcb8bdf7 Fixed probe not probing correct syscall entry

2022-03-17 19:36:25 -04:00

..

lib

Finished pseudo-connection between client and rootkit backdoor. Updated library to latest version.

2022-02-18 03:32:07 -05:00

.gdb_history

Fixed probe not probing correct syscall entry

2022-03-17 19:36:25 -04:00

execve_hijack

Finished extraction of stack return address

2022-03-17 13:18:19 -04:00

execve_hijack.asm

Added extraction of original jump instruction and opcodes

2022-03-15 18:36:59 -04:00

execve_hijack.c

Finished extraction of stack return address

2022-03-17 13:18:19 -04:00

execve_hijack.o

Finished extraction of stack return address

2022-03-17 13:18:19 -04:00

injection_lib.c

Successfully added uprobes calculation and hooking at arbitrary function of execve_hijack.

2022-03-03 05:53:51 -05:00

injection_lib.o

Successfully added uprobes calculation and hooking at arbitrary function of execve_hijack.

2022-03-03 05:53:51 -05:00

injection_lib.so

Successfully added uprobes calculation and hooking at arbitrary function of execve_hijack.

2022-03-03 05:53:51 -05:00

Makefile

Finished extraction of stack return address

2022-03-17 13:18:19 -04:00

peda-session-execve_hijack.txt

Finished extraction of return address from the stack, and libc syscall adress

2022-03-17 19:32:32 -04:00