SSaguninsagunwrites.hashnode.dev·Jul 31 · 3 min readWhat Is a Rootkit?Some malware wants to be seen. A rootkit wants the exact opposite. Its purpose is not to announce its presence or immediately disrupt a computer. Instead, a rootkit is designed to hide itself and, in 00
*********inmkdir-api-hookrise-of-linux-rootkit.hashnode.dev·Nov 13, 2024 · 10 min readUnderstanding How mkdir API Hook Leads to LKM Rootkits in LinuxIntroduction Adrishya is a Linux kernel module that leverages advanced kernel hooking techniques, specifically using ftrace (the Linux kernel’s function tracer) to hook into the mkdir system call. The module is designed to block directory creation at...00
