├── .gitignore ├── LICENSE-2.0.txt ├── Makefile ├── ORDER ├── README.md ├── debug_utils ├── install.sh ├── persist ├── persist-hook ├── show_audit_fd └── show_audit_mlog ├── efi_stuff.h ├── fanotify_hax.c ├── fanotify_hax.h ├── find_audit.c ├── find_audit.h ├── infect.c ├── infect.h ├── injected.c ├── libptrace_do.c ├── libptrace_do.h ├── loader.c ├── loader.h ├── mlog.c ├── mlog.h ├── parse_maps.c ├── payload.asm ├── splat.c ├── stage1.c ├── stage2d.c ├── timerslack.pl ├── z.c └── z.h /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/.gitignore -------------------------------------------------------------------------------- /LICENSE-2.0.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/LICENSE-2.0.txt -------------------------------------------------------------------------------- /Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/Makefile -------------------------------------------------------------------------------- /ORDER: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/ORDER -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/README.md -------------------------------------------------------------------------------- /debug_utils/install.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/debug_utils/install.sh -------------------------------------------------------------------------------- /debug_utils/persist: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/debug_utils/persist -------------------------------------------------------------------------------- /debug_utils/persist-hook: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/debug_utils/persist-hook -------------------------------------------------------------------------------- /debug_utils/show_audit_fd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/debug_utils/show_audit_fd -------------------------------------------------------------------------------- /debug_utils/show_audit_mlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/debug_utils/show_audit_mlog -------------------------------------------------------------------------------- /efi_stuff.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/efi_stuff.h -------------------------------------------------------------------------------- /fanotify_hax.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/fanotify_hax.c -------------------------------------------------------------------------------- /fanotify_hax.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/fanotify_hax.h -------------------------------------------------------------------------------- /find_audit.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/find_audit.c -------------------------------------------------------------------------------- /find_audit.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/find_audit.h -------------------------------------------------------------------------------- /infect.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/infect.c -------------------------------------------------------------------------------- /infect.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/infect.h -------------------------------------------------------------------------------- /injected.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/injected.c -------------------------------------------------------------------------------- /libptrace_do.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/libptrace_do.c -------------------------------------------------------------------------------- /libptrace_do.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/libptrace_do.h -------------------------------------------------------------------------------- /loader.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/loader.c -------------------------------------------------------------------------------- /loader.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/loader.h -------------------------------------------------------------------------------- /mlog.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/mlog.c -------------------------------------------------------------------------------- /mlog.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/mlog.h -------------------------------------------------------------------------------- /parse_maps.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/parse_maps.c -------------------------------------------------------------------------------- /payload.asm: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/payload.asm -------------------------------------------------------------------------------- /splat.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/splat.c -------------------------------------------------------------------------------- /stage1.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/stage1.c -------------------------------------------------------------------------------- /stage2d.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/stage2d.c -------------------------------------------------------------------------------- /timerslack.pl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/timerslack.pl -------------------------------------------------------------------------------- /z.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/z.c -------------------------------------------------------------------------------- /z.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/perturbed-platypus/LinooxMalware/HEAD/z.h --------------------------------------------------------------------------------