/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

blog.guillaume-gomez.fr
| | xcellerator.github.io

Learning about Linux rootkits is a great way to learn more about how the kernel works. What's great about it is that, unless you really understand what the kernel is doing, your rootkit is unlikely to work, so it serves as a fantasic verifier. In the FreeBSD world, you can find Joseph Kong's amazing book Designing BSD Rootkits. It was written in 2009, so is actually pretty outdated - which means that you have to do quite a bit of research to get the sample progras to work on modern FreeBSD.
2.5 parsecs

Travel
| |
| | debugging.works

describes how to debug a Linux Kernel Module
1.9 parsecs

Travel
| |
| | reverse.put.as

This is a guest post by a young and talented Portuguese exploiter, Federico Bento. He won this year's Pwnie for Epic Achievement exploiting TIOCSTI ioctl. Days ago he posted a video demonstrating an exploit for CVE-2017-5123 and luckly for you I managed to convince him to do a write-up about it. I hope you enjoy his work. Thanks Federico!
2.5 parsecs

Travel
| |
| | blog.oddball.tech

`gregkh` has some opinions about what version of the Linux kernel you should use. I largely agree, but I think we can go further.
16.0 parsecs

Travel
|