Pinned Loading

1. kprobe-mod kprobe-mod Public

   Kernel module that hooks __x64_sys_openat and prints the respective userspace arguments

   C

2. network-tools network-tools Public

   "Network tool" that I built, incorporating netlink for detailed interface configurations, and raw packet crafting to send packets that are modifiable by the user

   C

3. shell_in_memory shell_in_memory Public

   Encrypted reverse shell built in assembly, the "C Server" listens for the data and decrypts/encrypts data over the socket

   C

4. hook-mod hook-mod Public

   kernel module for 6.8.0-31-generic, using kprobe to get syscall addresses, and passing them to ftrace for patching

   C