h3xduck 8e97624326 Improved the pricvesc module which used sudo, now correctly working when the user already has sudo with password capabilities. Now the rootkit userspace helper is correctly launching with root permissions

2022-02-19 11:08:56 -05:00

..

include

Improved the pricvesc module which used sudo, now correctly working when the user already has sudo with password capabilities. Now the rootkit userspace helper is correctly launching with root permissions

2022-02-19 11:08:56 -05:00

bootstrap.bpf.c

Finished xdp ebpf program, successfully showing packets received. Added client from Umbra, it will be the C&C client

2021-11-22 18:58:58 -05:00

kit.bpf.c

Initial version of the RCE scheme- Added complete execve hook, helper and modifying capabilities for the filename called. Works still needs to be done

2022-02-06 14:15:57 -05:00

minimal.bpf.c

Setup development environment with libbpf

2021-11-20 21:07:23 -05:00