Pinned Loading

1. kprobe-mod kprobe-mod Public

   Kernel module that hooks __x64_sys_openat and prints the respective userspace arguments

   C

2. modelf modelf Public

   C Program that attempts to avoid corrupting a binary in ELF sections, to write shellcode and redirect e_entry to the respective shellcode

   C

3. network-tools network-tools Public

   "Network tool" that I built, incorporating netlink for detailed interface configurations, and raw packet crafting to send packets that are modifiable by the user

   C

4. shell_in_memory shell_in_memory Public

   Encrypted reverse shell built in assembly, the "C Server" listens for the data and decrypts/encrypts data over the socket

   C

5. hook-mod hook-mod Public

   kernel module for 6.8.0-31-generic, using kprobe to get syscall addresses, and passing them to ftrace for patching

   C