jm33_ng

Every technique used in this rootkit can be found from internet, I am NOT responsible for any damage you might cause using my code

what to expect

i plan to write a rootkit that runs in both kernel and user space, in which case it:

• requires root when using LKM …

View comments.

what is ptrace

ptrace() system call stands for process trace, which provides a way for debuggers such as gdb/strace to control a process (tracee). "debuggers" can be any process that sends a PTRACE_ATTACH/PTRACE_SEIZE, or receives a PTRACE_TRACEME from its child.

several things to notice:

1. a tracee's ptrace relationship …

View comments.