Linux Rootkits Part 1: Introduction and Workflow

This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.

Learning about Linux rootkits is a great way to learn more about how the kernel works. What’s great about it is that, unless you really understand what the kernel is doing, your rootkit is unlikely to work, so it serves as a fantasic verifier. In the FreeBSD world, you can find Joseph Kong’s amazing book Designing BSD Rootkits. It was written in 2009, so is actually pretty outdated -…

Read on /posts/linux_rootkits_01/ ↗