Giters

arget13 / DDexec

A technique to run binaries filelessly and stealthily on Linux by "overwriting" the shell's process with another.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Use "ld" to exec "dd" without file system's exec permission

fabianofurtado opened this issue · comments

commented

Hi...
As described in the README.md, making dd executable only by root WILL NOT prevent this technique being executed by the filesystem: you could call "ld" before calling "dd".
Please, add $loader variable to your script to use the "ld" and "dd" together.
Thanks in advance.

commented

This is by default disabled. You can make export USE_INTERP=1 and then run the script in order to use this technique.