Commits

Branch selector

 master

User selector

All users

Datepicker

All time

Commit History

Commits on Dec 1, 2021

• 1-sys_call_table/fshid: Avoided SMAP violation.

  NoviceLive

  committed
  c1adfbe

  Copy full SHA for c1adfbe

Commits on Nov 28, 2021

• 2-fundamentals/root: Updated for kernel version 5.7 and above.

  NoviceLive

  committed
  f49a502

  Copy full SHA for f49a502

• 1-sys_call_table/fsmon: Avoided SMAP violation.

  NoviceLive

  committed
  3ce8510

  Copy full SHA for 3ce8510

• 1-sys_call_table/write_protection: Also printed the value of cr4.

  NoviceLive

  committed
  fcd1a71

  Copy full SHA for fcd1a71

• 1-sys_call_table/psmon: Avoided SMAP violation.

  NoviceLive

  committed
  acecebc

  Copy full SHA for acecebc

• join_strings_from_user: Added.

  NoviceLive

  committed
  b337aec

  Copy full SHA for b337aec

Commits on Nov 27, 2021

• README: Dropped links to non-lkm thing.

  NoviceLive

  committed
  d78ee37

  Copy full SHA for d78ee37

• 1-sys_call_table/fsmon: Updated to allow the pg_regs syscall convention and added a hook upon openat.

  NoviceLive

  committed
  24fed91

  Copy full SHA for 24fed91

• 1-sys_call_table/psmon: Updated to allow the pg_regs syscall convention.

  NoviceLive

  committed
  3162e8b

  Copy full SHA for 3162e8b

• 1-sys_call_table/fshid: Updated to the pg_regs syscall convention.

  NoviceLive

  committed
  da1539e

  Copy full SHA for da1539e

• get_sct: Added urls on info of export change of kallsyms_lookup_name.

  NoviceLive

  committed
  a2f75b2

  Copy full SHA for a2f75b2

• 1-sys_call_table/hello: Added a target ``make test``.

  NoviceLive

  committed
  5e0ceea

  Copy full SHA for 5e0ceea

• get_sct: Added tries via kallsyms_lookup_name or register_kprobe.

  NoviceLive

  committed
  c864c43

  Copy full SHA for c864c43

• fm_info & fn_info: Added.

  NoviceLive

  committed
  22aaf2f

  Copy full SHA for 22aaf2f

• 1-sys_call_table/write_protection: Used our own old version of native_write_cr0 to workaround cr_pinning in newer kernels, e.g., 5.3.

  NoviceLive

  committed
  6827255

  Copy full SHA for 6827255

• sys_close: Referenced only when LINUX_VERSION_CODE < KERNEL_VERSION(4, 17, 0).

  NoviceLive

  committed
  9af03ce

  Copy full SHA for 9af03ce

Commits on Nov 25, 2021

• README: Fixed a grammar mistake.

  NoviceLive

  committed
  bc66142

  Copy full SHA for bc66142

Commits on May 27, 2021

• README-zh_CN: Updated links of articles in Chinese.

  NoviceLive

  committed
  e3c3528

  Copy full SHA for e3c3528

Commits on Oct 15, 2018

• README-zh_CN.rst: Linked ``Linux Rootkit 系列六：基于修改派遣例程的系统调用挂钩``.

  NoviceLive

  committed
  050c478

  Copy full SHA for 050c478

• 3-persistence/noinj/noinj.c: Fixed a typo since fake_init should call noinj_init.

  NoviceLive

  committed
  bfc2c64

  Copy full SHA for bfc2c64

Commits on Jul 25, 2016

• __NR_syscall_max + 1: Used.

  NoviceLive

  committed
  5e1db10

  Copy full SHA for 5e1db10

Commits on Jul 23, 2016

• Wording Fixes: Applied.

  NoviceLive

  committed
  e904a99

  Copy full SHA for e904a99

Commits on Jul 22, 2016

• Round up: Added two more courses with other improvements.

  Show description for b170792
  NoviceLive

  committed
  b170792

  Copy full SHA for b170792

Commits on Jul 21, 2016

• Naming: Renamed.

  NoviceLive

  committed
  aff0ccd

  Copy full SHA for aff0ccd

• Compatibility Fixes: Included some headers explicitly and used PRIx64 and the like.

  NoviceLive

  committed
  c1c2e5e

  Copy full SHA for c1c2e5e

• wp & sct: Used abbreviations.

  NoviceLive

  committed
  f043794

  Copy full SHA for f043794

• LibZeroEvil: Established and adapted per-file license headers and added scripts to test compilation and update links.

  NoviceLive

  committed
  b1a8692

  Copy full SHA for b1a8692

Commits on Jul 19, 2016

• maK_it-Linux-Rootkit: Added in Projects Of Interests.

  NoviceLive

  committed
  98255d0

  Copy full SHA for 98255d0

• links: Added Arciryas's articles.

  NoviceLive

  committed
  9ba711c

  Copy full SHA for 9ba711c

Commits on Jul 17, 2016

• sys_call_table -> real_sys_call_table: Renamed the variable to avoid conflicting types on some systems.

  NoviceLive

  committed
  2ff03f7

  Copy full SHA for 2ff03f7

Commits on Jul 14, 2016

• root backdooring: Fixed a critical typing error and included <linux/sched.h> to support older kernels.

  Show description for bb18733
  NoviceLive

  committed
  bb18733

  Copy full SHA for bb18733

• real: Observed more symbols.

  NoviceLive

  committed
  67f9ffd

  Copy full SHA for 67f9ffd

Commits on Jul 13, 2016

• real: Added enhanced codeinj targeting real-world modules with 'static __init' or 'static __exit'.

  NoviceLive

  committed
  397671f

  Copy full SHA for 397671f

• codeinj: Added injectiing by linking and controlling by modifying .symtab and hooking the original init and exit.

  NoviceLive

  committed
  daa4467

  Copy full SHA for daa4467

• noinj: Added hijacking of init and exit based on .symtab modification.

  NoviceLive

  committed
  be6a093

  Copy full SHA for be6a093

Pagination

Previous

Next