Vulnerability Development mailing list archives

Re: Positive uses for rootkits


From: "Martin 'Goran' Moravec" <goran () UCW CZ>
Date: Tue, 27 Mar 2001 23:16:52 +0200


That is a great strategy to follow.  Take it another step tho.  If this
is a server we are talking about, don't even put devel. tools on the
box.  Build your small static kernel elsewhere and copy it to the box.

There *are* wasy around this, but you gotta be good.  If you play with
memory locations directly, there are ways to load a module even on a
static monloitic kernel.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
HOW ?! (with modules disabled)
seems insane to me, although I'm not a kernel hacker.

But as I said, you gotta be real good.  Read that as "no script kiddies"

-b


Goran


Current thread: