mirror of
https://github.com/h3xduck/TripleCross.git
synced 2025-12-16 23:33:06 +08:00
36 lines
618 B
Markdown
36 lines
618 B
Markdown
# TripleCross
|
|
Instructions soon!
|
|
For now, you can read the paper at docs/ebpf_offensive_rootkit
|
|
<!---
|
|
## Build and run
|
|
```bash
|
|
cd src
|
|
make
|
|
sudo ./bin/kit -t <network interface>
|
|
```
|
|
Network interface used for PoC: lo
|
|
|
|
## PoC 0 - Modifying incoming traffic
|
|
### Option 1: With netcat
|
|
Terminal 1:
|
|
```bash
|
|
nc -l 9000
|
|
```
|
|
Terminal 2:
|
|
```bash
|
|
echo -n "XDP_PoC_0" | nc 127.0.0.1 9000
|
|
```
|
|
### Option 2: With the in-built client
|
|
```bash
|
|
cd src/client
|
|
sudo ./injector -S 127.0.0.1
|
|
```
|
|
|
|
------------------
|
|
## PoC 1 - Modifying arguments of read syscalls
|
|
```bash
|
|
echo "This won't be seen" > /tmp/txt.txt
|
|
cat /tmp/txt.txt
|
|
```
|
|
---!>
|