Commits

Breadcrumbs

History for

onmaster

User selector

All users

Datepicker

All time

Commit History

Commits on Jul 11, 2022

• Updated README to show specific software versions we used during development, also removed one extra free that resulted in errors in the client.

  h3xduck

  committed
  51bf3ef

  Copy full SHA for 51bf3ef

Commits on Jul 6, 2022

• Removed unnecessary includes, fixes h3xduck#39

  h3xduck

  committed
  2a7ad0f

  Copy full SHA for 2a7ad0f

Commits on Jul 1, 2022

• README and license

  h3xduck

  committed
  2b6fe08

  Copy full SHA for 2b6fe08

Commits on Jun 25, 2022

• Cleaned unnecessary files, new gitignore for previous clones

  h3xduck

  committed
  102b72a

  Copy full SHA for 102b72a

Commits on Jun 19, 2022

• Finished section 5. Multiple changes in the code according to the performed tests.

  h3xduck

  committed
  5d6619c

  Copy full SHA for 5d6619c

Commits on Jun 18, 2022

• Added multiple small changes to client and code, submitting almost finished chapter 5

  h3xduck

  committed
  bfcbfcf

  Copy full SHA for bfcbfcf

Commits on Jun 17, 2022

• Completed chapter 4

  h3xduck

  committed
  2b719ff

  Copy full SHA for 2b719ff

Commits on Jun 16, 2022

• Forgot to modify one appearance of old name

  h3xduck

  committed
  f98f654

  Copy full SHA for f98f654

• Changed the repository (and the rootkit!) name with TripleCross: https://dictionary.cambridge.org/dictionary/english/double-cross. This is 'triple' because it is a BPF program that betrays you at t…

  Show description for 80f3346
  h3xduck

  committed
  80f3346

  Copy full SHA for 80f3346

Commits on Jun 15, 2022

• Modified terminal names in the client

  h3xduck

  committed
  75e9244

  Copy full SHA for 75e9244

• Modified client options once again for screenshots

  h3xduck

  committed
  bdda5c4

  Copy full SHA for bdda5c4

• Further changed some help in the client

  h3xduck

  committed
  b284581

  Copy full SHA for b284581

• Modified the help of the client, this is for making some screenshots

  h3xduck

  committed
  081a23a

  Copy full SHA for 081a23a

Commits on Jun 14, 2022

• Continued with execve hijacking.

  h3xduck

  committed
  163f923

  Copy full SHA for 163f923

Commits on Jun 13, 2022

• New explanation for the injection technique (alternative scanning process) and added flow diagram with full process.

  h3xduck

  committed
  99ad9c5

  Copy full SHA for 99ad9c5

• Further advanced with the library injection, almost finished. Multiple enhancements

  h3xduck

  committed
  71b0931

  Copy full SHA for 71b0931

Commits on Jun 11, 2022

• Updated injection module to ensure shellcode fits in code cave. Added simple reverse shell in injection lib

  h3xduck

  committed
  d7a9b0e

  Copy full SHA for d7a9b0e

Commits on Jun 10, 2022

• Continued with library injection attack

  h3xduck

  committed
  1595caa

  Copy full SHA for 1595caa

Commits on Jun 2, 2022

• Continued with offensive capabilities, incorporated security features and started with tracing program features

  h3xduck

  committed
  2c3648a

  Copy full SHA for 2c3648a

Commits on May 22, 2022

• Continued with the state of the art section

  h3xduck

  committed
  3ec9175

  Copy full SHA for 3ec9175

Commits on May 18, 2022

• Fixed a bug where tcpport mode in the multi-packet backdoor did not work if a previous trigger using seqnum mode was made

  h3xduck

  committed
  3e697dd

  Copy full SHA for 3e697dd

Commits on May 16, 2022

• Added obfuscation for the persistance access using cron

  h3xduck

  committed
  104f4c0

  Copy full SHA for 104f4c0

• Added new deployer for preparing final files, messed up with the phantom shell, sometimes gives errors, but I don't think we can do much, the shared maps together with multi-hooks on network has so…

  Show description for ccd5182
  h3xduck

  committed
  ccd5182

  Copy full SHA for ccd5182

• Completed work on deployer, previous to cron persistence

  h3xduck

  committed
  757a480

  Copy full SHA for 757a480

• Added hide directory capabilities for the rootkit

  h3xduck

  committed
  82fa056

  Copy full SHA for 82fa056

• Added sys_openat for the injection module, fully working!

  h3xduck

  committed
  4044d79

  Copy full SHA for 4044d79

• Updated some files for eveything to work now that it is all together. Execve hijacker and clients in particular

  h3xduck

  committed
  78b3132

  Copy full SHA for 78b3132

• Merged master and develop, now all changes together. Fully tested and working.

  h3xduck

  committed
  4a292f0

  Copy full SHA for 4a292f0

Commits on May 15, 2022

• Fixed bug in client getting local ip

  h3xduck

  committed
  57f3edd

  Copy full SHA for 57f3edd

• Solved an error in client ip config

  h3xduck

  committed
  6e76e1e

  Copy full SHA for 6e76e1e

• Fixed phantom shell, added ips for all types of backdoor triggers so that we can use different interfaces

  h3xduck

  committed
  ce3b267

  Copy full SHA for ce3b267

• Updated client to work with multiple network interfaces

  h3xduck

  committed
  e6cbe7c

  Copy full SHA for e6cbe7c

• Completed command passing for phantom shell

  h3xduck

  committed
  d509f20

  Copy full SHA for d509f20

Commits on May 12, 2022

• Completed phantom shell protocol, added new checksum correctors

  h3xduck

  committed
  ad4f9b2

  Copy full SHA for ad4f9b2

Commits on May 11, 2022

• Completed the TC Hook and payload enlargment and substitution mechanisms. Only the packet recognition on the client side remains to work

  h3xduck

  committed
  28ed530

  Copy full SHA for 28ed530

Pagination

Previous

Next