h3xduck 1ec4ed8486 Now the execve hijacker works without needing a canalizer. Removed it. Also some additional tweaks to the c&c launching of the helper

2022-02-19 11:57:32 -05:00

..

include

Now the execve hijacker works without needing a canalizer. Removed it. Also some additional tweaks to the c&c launching of the helper

2022-02-19 11:57:32 -05:00

bootstrap.bpf.c

Finished xdp ebpf program, successfully showing packets received. Added client from Umbra, it will be the C&C client

2021-11-22 18:58:58 -05:00

kit.bpf.c

Initial version of the RCE scheme- Added complete execve hook, helper and modifying capabilities for the filename called. Works still needs to be done

2022-02-06 14:15:57 -05:00

minimal.bpf.c

Setup development environment with libbpf

2021-11-20 21:07:23 -05:00