Feed
Discussion
Understanding How mkdir API Hook Leads to LKM Rootkits in Linux
Introduction Adrishya is a Linux kernel module that leverages advanced kernel hooking techniques, specifically using ftrace (the Linux kernel’s function tracer) to hook into the mkdir system call. The module is designed to block directory creation at...
mkdir-api-hookrise-of-linux-rootkit.hashnode.dev10 min read
#ftrce-hook#kprobe#lkm#linux#rootkit#kernel-bypassing#rootkits#api-hooking#arm#hacking#infosec-cjbi6apo9015yaywu2micx2eo#systemprogramming#malware
Responses
No responses yet.