threadexio/kernel-module-backdoor-poc
Archived
Watch
1
0
Fork
You've already forked kernel-module-backdoor-poc
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
A simple but dangerous backdoor built as a kernel module.
This repository has been archived on 2026-06-10. You can view files and clone it, but you cannot make any changes to its state, such as pushing and creating new issues, pull requests or comments.
4 commits 1 branch 0 tags 52 KiB
  • C 89.9%
  • Makefile 8.1%
  • Shell 2%
Find a file
Exact
Repository files (latest commit first)
Filename Latest commit message Latest commit date
threadexio 4ed9d9b090
 Added the ability for the module hiding itself
2022-01-27 09:18:27 +02:00
char-dev Added a syscall hooking variant 2022-01-27 01:46:07 +02:00
syscall-hook Added the ability for the module hiding itself 2022-01-27 09:18:27 +02:00
.gitignore Added a syscall hooking variant 2022-01-27 01:46:07 +02:00
LICENSE Initial commit 2022-01-15 16:06:17 +02:00
README.md Initial commit 2022-01-15 16:06:17 +02:00
Vagrantfile Initial commit 2022-01-15 16:06:17 +02:00

README.md

Linux Kernel Module backdoor

A simple proof-of-concept for a kernel backdoor using modules. I made this just out of curiosity and because I wanted to see what kernel development was like. So yes, this is intended for educational purposes only.

I'm sure there are hundreads of these on the internet but I wanted to make one from scratch.

Here are some resources I used (in no particular order):

Documentation

As this is a working and dangerous piece of software and I want to keep 1337 5cr1p7 k1dd13s away, I will not explain how to use the software in the repo. If you are experienced enough or have read the above links you will understand how to use this.