Trail of Bits Blog company blog

How to write a rootkit without really trying

We open-sourced a fault injection tool, KRF, that uses kernel-space syscall interception. You can use it today to find faulty assumptions (and resultant bugs) in your programs. Check it out! This post covers intercepting system calls from within the Linux kernel, via a plain old kernel module. We’ll go through a quick…
Points
118
HN comments
10
Submissions
1
Cited by
0 commenters

Security & PrivacySystems & Performance2019

On Hacker News

SubmittedTitle on HNPointsComments
Jan 17, 2019How to write a rootkit without really trying by ingve11810

More from Trail of Bits Blog

All 45 posts →

Related posts from the same era