Thread replies: 10
Thread images: 2
Thread images: 2
Anonymous
Working on a LD_PRELOAD rootkit 2016-11-02 22:03:51 Post No. 57359286
[Report] Image search: [Google]
Working on a LD_PRELOAD rootkit 2016-11-02 22:03:51 Post No. 57359286
[Report] Image search: [Google]
File: xSBmpjt.png (8KB, 433x222px) Image search:
[Google]
8KB, 433x222px
What do you think /g/, any feedback or suggestions to which features I should implement next?
List of features is in the readme under 0x00000013
https://raw.githubusercontent.com/mempodippy/vlany/master/README
https://github.com/mempodippy/vlany
>>
mirai
>>
File: 1404498407808.jpg (6KB, 250x250px) Image search:
[Google]
6KB, 250x250px
>rootkit
>>
>>57359328
:^)
>>
is that illegal?
>>
>>57359573
it is if you want it to be
>>
Does it hide the sshd process in ps?
>>
>>57359621
yep
vlany hooks getutent, getutxent, pututline to hide user activity on the box
so basically the user doesn't even exist and you won't be able to see your pam backdoor user connected to the box's sshd service
>>
>>57359286
OP is gay
>>
>>57359690
>>57359621
additionally, compared to something like azazel which tries hiding this activity by cleaning the wtmp and utmp files (in a terrible way nonetheless)
Thread posts: 10
Thread images: 2
Thread images: 2