Initial upload

2018-02-27 11:07:04 -06:00 · 2018-02-27 11:07:04 -06:00 · 08de1f2ead
parent 14d31eba11
commit 08de1f2ead
1 changed files with 21 additions and 0 deletions
--- a/Linux/Defense_Evasion/Rootkits.md
+++ b/Linux/Defense_Evasion/Rootkits.md
@ -0,0 +1,21 @@
+## Rootkits
+
+MITRE ATT&CK Technique: [T1014](https://attack.mitre.org/wiki/Technique/T1014)
+
+### Loadable Kernel Module based Rootkit
+
+Input:
+
+    sudo insmod MODULE.ko
+
+OR
+
+Input:
+
+    sudo modprobe MODULE.ko
+
+### LD_PRELOAD based Rootkit
+
+Input:
+
+    export LD_PRELOAD=$PWD/libmy_r00tkit.so