All Projects → PinkP4nther → Sutekh

PinkP4nther / Sutekh

An example rootkit that gives a userland process root permissions

Programming Languages

c
50402 projects - #5 most used programming language

Projects that are alternatives of or similar to Sutekh

Diamorphine
LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x (x86/x86_64 and ARM64)
Stars: ✭ 725 (+1069.35%)
Mutual labels:  kernel, linux-kernel, rootkit
kernel-ci
Continuous integration for the Linux Kernel - Built within Docker
Stars: ✭ 34 (-45.16%)
Mutual labels:  kernel, linux-kernel
Microdot
The Microdot Project guides you to create a fully functional but compact Linux system from scratch
Stars: ✭ 41 (-33.87%)
Mutual labels:  kernel, linux-kernel
S6 pcie microblaze
PCI Express DIY hacking toolkit for Xilinx SP605
Stars: ✭ 301 (+385.48%)
Mutual labels:  kernel, rootkit
Sphinx-Dipper
Sphinx Custom Kernel for Mi 8 (Dipper)
Stars: ✭ 17 (-72.58%)
Mutual labels:  kernel, linux-kernel
execmon
Advanced process execution monitoring utility for linux (procmon like)
Stars: ✭ 77 (+24.19%)
Mutual labels:  kernel, linux-kernel
Sphinx-Beryllium
Sphinx Custom Kernel for Pocophone F1 (Beryllium)
Stars: ✭ 23 (-62.9%)
Mutual labels:  kernel, linux-kernel
kernel-memtest
Hybrid memtest running in kernel mode, and userspace.
Stars: ✭ 17 (-72.58%)
Mutual labels:  kernel, linux-kernel
Spy
👀 Linux kernel mode debugfs keylogger
Stars: ✭ 546 (+780.65%)
Mutual labels:  kernel, linux-kernel
Awesome Linux Rootkits
awesome-linux-rootkits
Stars: ✭ 583 (+840.32%)
Mutual labels:  linux-kernel, rootkit
Paper collection
Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read
Stars: ✭ 710 (+1045.16%)
Mutual labels:  kernel, linux-kernel
OpenHarmony
华为鸿蒙分布式操作系统(Huawei OpenHarmony)开发技术交流,鸿蒙技术资料,手册,指南,共建国产操作系统万物互联新生态。
Stars: ✭ 373 (+501.61%)
Mutual labels:  kernel, linux-kernel
Linux-Kernel-Exploitation
Linux kernel development & exploitation lab.
Stars: ✭ 130 (+109.68%)
Mutual labels:  kernel, linux-kernel
linux kernel wiki
linux内核学习资料:200+经典内核文章,100+内核论文,50+内核项目,500+内核面试题,80+内核视频
Stars: ✭ 1,653 (+2566.13%)
Mutual labels:  kernel, linux-kernel
w1-gpio-cl
Command line configured kernel mode 1-wire bus master driver. w1-gpio standard Linux module enhancement/substitution.
Stars: ✭ 17 (-72.58%)
Mutual labels:  kernel, linux-kernel
camflow-dev
Generates kernel patch for CamFlow Linux Provenance Capture.
Stars: ✭ 19 (-69.35%)
Mutual labels:  kernel, linux-kernel
satan
🔓 x86 Linux Kernel rootkit for Debian 9 (4.9.0-11-686-pae)
Stars: ✭ 31 (-50%)
Mutual labels:  rootkit, linux-kernel
NtSymbol
Resolve DOS MZ executable symbols at runtime
Stars: ✭ 78 (+25.81%)
Mutual labels:  kernel, rootkit
Kernel Exploits
Various kernel exploits
Stars: ✭ 397 (+540.32%)
Mutual labels:  kernel, linux-kernel
Hidden
Windows driver with usermode interface which can hide objects of file-system and registry, protect processes and etc
Stars: ✭ 768 (+1138.71%)
Mutual labels:  kernel, rootkit

Sutekh

An example rootkit that gives a userland process root permissions Tested on Linux kernel [4.19.62] & [4.15.0]

[INSTALL]

  1. Install latest Linux headers for your kernel. Example (debian): [apt install linux-headers-$(uname -r)]
  2. $ git clone https://github.com/PinkP4nther/Sutekh
  3. $ cd Sutekh && make
  4. $ gcc rootswitch.c -o rs
  5. $ sudo insmod sutekh.ko

[Run] $ ./rs

[Output example] [[email protected] Sutekh]$ ./rs [!] Switch hit! [mememachine Sutekh]# id uid=0(root) gid=0(root) groups=0(root) [mememachine Sutekh]# exit

[Remove] sudo rmmod sutekh

[Note] dmesg for kernel debug output!

[ 2217.810776] [?] SCT: [0xffffffff96400180] [?] EXECVE: [0xffffffffc065b030] [?] UMASK: [0xffffffffc065b000] [ 2223.379218] [+] Giving r00t!

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].