FBrasileiro / GGN Public

Notifications You must be signed in to change notification settings
Fork 1
Star 3

Simple LKM rootkit for linux kernel >= 5.7

3 stars 1 fork Branches Tags Activity

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 1 Commit
Makefile		Makefile
Readme.md		Readme.md
ggn.c		ggn.c

Repository files navigation

GGN

Simple LKM rootkit for linux kernel >= 5.7

Sending signal 60 to any pid gives root to the current user

Tested on 5.13.4-arch1-1

Initializing

make
insmod ggn.ko

Getting root

kill -60 123123

Removing

rmmod ggn

Study References

Linux Kernel Hacking - Blog

The Linux Kernel - Credentials in Linux

About

Simple LKM rootkit for linux kernel >= 5.7

Report repository

Languages