Comments (19)
Tested on CentOS 7 with Kernel 3.10.0-1160.2.2.el7.x86_64
from diamorphine.
Thank you for the feedback.
Those issues appear in the last commit? Because some compability problems for the 2.6 kernels have been fixed in the af9a0f4 commit.
from diamorphine.
works ace on
Red Hat Enterprise Linux Server release 7.2 (Maipo)
3.10.0-327.13.1.el7.x86_64
thanks for writing this rootkit 👍
from diamorphine.
However, on a CentOS 6.7 I ran into this issue
make -C /lib/modules/2.6.32-573.22.1.el6.centos.plus.x86_64/build M=/root/git/Diamorphine modules
make: *** /lib/modules/2.6.32-573.22.1.el6.centos.plus.x86_64/build: No such file or directory. Stop.
make: *** [all] Error 2
I just cloned it from the master branch...
from diamorphine.
Thanks for your feedback @aremai .
Make sure you have kernel-devel and gcc packages installed(yum install kernel-devel gcc).
Regards.
from diamorphine.
Awesome, thanks so much @m0nad !! Now it also works on CentOS 6.7 with an older kernel (2.6.32-573)
Would you mind mentioning this in the README? This would clear some confusion.... (maybe I'm just dumb) hehe
from diamorphine.
hi @m0nad ,
sorry it's me again. I came across an odd situation.... I'm on a CentOS release 6.8 box
I've managed to successfully compile (make) diamorphine, however when I want to load the kernel module (insmod diamorphine.ko) it takes a while to run, and all of the sudden I'm kicked off the machine
packet_write_wait: Connection to 10.0.0.123 port 22: Broken pipe
Afterwards these files are zero'd (have 0 bytes)
-rw-r--r--. 1 root root 0 Jul 23 21:42 diamorphine.ko
-rw-r--r--. 1 root root 0 Jul 23 21:42 diamorphine.ko.unsigned
-rw-r--r--. 1 root root 0 Jul 23 21:42 diamorphine.mod.c
-rw-r--r--. 1 root root 0 Jul 23 21:42 diamorphine.mod.o
-rw-r--r--. 1 root root 0 Jul 23 21:42 modules.order
-rw-r--r--. 1 root root 0 Jul 23 21:42 Module.symvers
I know that it worked on another CentOS 6 box just fine a couple of months ago, but on this time I can't seem to load the kernel module.
Any idea what could be blocking it? It's driving me crazy...
from diamorphine.
This is awesome work, thank you m0nad!
Just on Raspbian (on Raspberry Pi 2 B at least), I had to put the following instead of line 21 in order to make it work:
#ifndef _ASM_X86_SPECIAL_INSNS_H
#define _ASM_X86_SPECIAL_INSNS_H
#ifdef __KERNEL__
unsigned long cr0;
static inline unsigned long native_read_cr0(void)
{
unsigned long val;
asm volatile("mov %0, %1\n\t" : "=r" (val) : "r" (cr0));
return val;
}
static inline void native_write_cr0(unsigned long val)
{
asm volatile("mov %0, %1\n\t" : "=r" (cr0) : "r" (val));
}
#ifdef CONFIG_PARAVIRT
#include <asm/paravirt.h>
#else
static inline unsigned long read_cr0(void)
{
return native_read_cr0();
}
static inline void write_cr0(unsigned long x)
{
native_write_cr0(x);
}
#endif/* CONFIG_PARAVIRT */
#endif /* __KERNEL__ */
#endif /* _ASM_X86_SPECIAL_INSNS_H */
from diamorphine.
Thank's for the feedback @dimitriakos, can you do a fork and a pull request for this?
from diamorphine.
Commit 4438984 tested on Ubuntu 18.04/20.04 with kernel 5.4.0-42-generic
from diamorphine.
Tested in fedora with kernel 5.6.6
from diamorphine.
Tested on ubuntu 16.04, kernel 4.15.0-112-generic
from diamorphine.
Tested on ubuntu 19.04, kernel 5.0.0-13-generic
from diamorphine.
Tested on:
Ubuntu 18.04 Kernel 4.15.0-20-generic
Ubuntu 18.04.1 Kernel 4.15.0-29-generic
Ubuntu 18.04.2 Kernel 4.18.0-15-generic
Ubuntu 18.04.3 Kernel 5.0.0-23-generic
Ubuntu 18.04.4 Kernel 5.3.0-28-generic
Ubuntu 18.04.5 Kernel 5.4.0-42-generic
from diamorphine.
Tested on CentOS release 6.4/6.5 with Kernel 2.6.32-754.35.1.el6.x86_64
from diamorphine.
Tested on CentOS 8.2 with Kernel 4.18.0-193.28.1.el8_2.x86_64
from diamorphine.
Tested on Ubuntu 20.04.3 LTS with Kernel 5.11.0-37-generic
from diamorphine.
Tested on Fedora 6.2.14-100.fc36.x86_64
from diamorphine.
Tested on Linux fedora 6.4.15-200.fc38.x86_64
from diamorphine.
Related Issues (20)
- Questions about hidden processes and display modules HOT 5
- Unable to execute it on Ubuntu 18 HOT 1
- Feature Request: hide ip or ports HOT 1
- Failing to insmod on Linux for Tegra (L4T, arm64) HOT 3
- What is the point in the set_root function? HOT 2
- Build doesn't work on Kali GNU/Linux Rolling (9.16.12-Debian - Linux 5.10.0-kali4-amd64 Kernel) HOT 3
- Bad link to LKM hacking article HOT 1
- Hide/Unhide Files and Directories. [Feature] HOT 2
- Segmentation fault at readdir64 on CentOS 7
- give_root() HOT 1
- arm64 needs kallsums_lookup_name in _init() as well HOT 3
- Real use case of this LKM ?? HOT 1
- Help please. HOT 1
- insmod crashes android ARM64... HOT 4
- 63 vs 31 clarification
- linux 6.3 can support HOT 5
- add for hidding tcp connection HOT 1
- Issue Encountered During Compilation of Diamorphine Module
- Support Ubuntu 24.04 LTS
- Compiling for ubuntu22.04 Linux 6.5.0-35
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from diamorphine.