ruihanxu2 / sneakyProcess

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Modified Linux kernel to hide a sneaky process which can change the /etc/passwd file. By replacing the open(), read() and getdents() system call, the installed kernel model, the process binary file and the process id are hidden from commands like ‘ls’, ‘lsmod’, ‘ps’ and ‘find’.

About


Languages

Language:C 95.8%Language:Makefile 4.2%