oshaked1 / ghoul

A slippery, elusive, wicked rootkit for Linux

oshaked1/ghoul Issues

Ftrace exposes ghoul
Updated 2 years ago1
Ghoul listed under `/sys/module`
Closed 2 years ago1
Ftrace stops working when ghoul is loaded
Closed 2 years ago3
Add option to unhide a file for the parent process
Closed 2 years ago
Ping argument can be changed without knowing the current one
Closed 2 years ago
Add tests
Closed 2 years ago1
Memory leak when unloading module
Closed 2 years ago
Inodes may be hidden more than once
Closed 2 years ago
Make sure memory allocations succeed
Closed 2 years ago
Use `kzalloc` instead of `kmalloc`
Closed 2 years ago
`kmsg` exposes ghoul
Updated 2 years ago
Print to `kmsg` only if debugging messages are configured
Closed 2 years ago
Trying to `rmmod ghoul` reveals its existence
Closed 2 years ago1