Re:Basics of Making a Rootkit – From syscall to hook
by matthewaveryusa on Sunday December 25, 2016 @06:58PM
(#13256109)
I found the suterusu rootkit to be feature-full and very well written. It covers all sorts of things a rootkit would do:
https://github.com/mncoppola/suterusu
I never wrote kernel code before, but within 24 hours I was able to write a 'whitekit' that installs and hides as a rootkit and reports on sneaky behavior in dmesg:
I never wrote kernel code before, but within 24 hours I was able to write a 'whitekit' that installs and hides as a rootkit and reports on sneaky behavior in dmesg:
https://github.com/matthewaveryusa/whitekit/
Fun stuff!