{"id":22154331,"url":"https://github.com/hiteshd/android-rootkit","last_synced_at":"2025-07-30T20:04:40.992Z","repository":{"id":7993410,"uuid":"9400174","full_name":"hiteshd/Android-Rootkit","owner":"hiteshd","description":"A rootkit for Android. Based on \"Android platform based linux kernel rootkit\" from Phrack Issue 68","archived":false,"fork":false,"pushed_at":"2023-11-04T01:40:04.000Z","size":230,"stargazers_count":271,"open_issues_count":4,"forks_count":103,"subscribers_count":17,"default_branch":"master","last_synced_at":"2025-07-26T11:02:53.667Z","etag":null,"topics":["android","android-rootkit","rootkit"],"latest_commit_sha":null,"homepage":null,"language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hiteshd.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2013-04-12T17:50:48.000Z","updated_at":"2025-07-26T06:46:24.000Z","dependencies_parsed_at":"2025-07-26T06:32:50.143Z","dependency_job_id":"e290db87-bbee-43c8-88c0-4d1e359773ea","html_url":"https://github.com/hiteshd/Android-Rootkit","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/hiteshd/Android-Rootkit","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hiteshd%2FAndroid-Rootkit","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hiteshd%2FAndroid-Rootkit/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hiteshd%2FAndroid-Rootkit/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hiteshd%2FAndroid-Rootkit/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hiteshd","download_url":"https://codeload.github.com/hiteshd/Android-Rootkit/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hiteshd%2FAndroid-Rootkit/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":267930601,"owners_count":24167475,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-07-30T02:00:09.044Z","response_time":70,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["android","android-rootkit","rootkit"],"created_at":"2024-12-02T01:47:26.366Z","updated_at":"2025-07-30T20:04:40.939Z","avatar_url":"https://github.com/hiteshd.png","language":"C","readme":"Android-Rootkit\n===============\n\nA rootkit for Android. Based on [Android platform based linux kernel rootkit](http://www.phrack.org/issues/68/6.html#article) from Phrack Issue 68\n\nPart of [ISA 673](http://cs.gmu.edu/~astavrou/isa673_S10.html) a class project. Adding it here just because there is not just enough documentation out there to do this for Android\n\nI appreciate any pull requests as long as they extend functionality and dont do harm\n\nKernel Build Specs\n===================\n* Using kernel tree from [here](https://github.com/Evervolv/android_kernel_htc_qsd8k)\n\n* Using ROM image from [here](http://cos-bravo-ics.googlecode.com/files/COS-Bravo-Jb-alpha1.zip)\n\n* Using Android NDK toolchain 4.4.3 from Google.\n\n* Tried and tested on HTC Bravo running kernel version 2.6.38.8\n\n\nModule Information\n==================\n\nFilename:      `sys_call_table.ko`\nDesciption:    This rookit is developed to intercept the following calls\n* SYS_WRITE\n* SYS_READ\n* SYS_CREAT\n* SYS_MKDIR\n* SYS_RMDIR\n* SYS_KILL\n* SYS_OPEN\n* SYS_CLOSE\n* SYS_GETDENT\n* SYS_UNLINK\n* SYS_KILL\n\nAuthor:         Hitesh Dharmdasani \u003chdharmda@gmu.edu\u003e\n\nLicense:        GPL v2\n\nDepends:        Android NDK, Kernel source tree of target\n\nVermagic:       2.6.38.8-cos-bravo-jellybean+ preempt mod_unload ARMv7\n\n\nOther details\n=============\n\n* The source tree will not complile to give you a zImage that you should use. A hack around it was to just use a pre built rom with the same specs\n* If you are facing vermagic issues. Fix them by the obvious.\n  * Fix entry in utrelease.h\n  * Fix entry in kernel.release\n  * DO NOT 'make' the kernel source tree after you do this\n* Edit the makefile to suit your paths for the NDK and the kernel source tree for your Android Operating system\n* The rootkit compiles as a kernel object and needs to be run on the phone.\n    * `# insmod sys_call_table.ko`\n    * `# ./sys_call_table_inst`\n* Use `dmesg` to debug\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhiteshd%2Fandroid-rootkit","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fhiteshd%2Fandroid-rootkit","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhiteshd%2Fandroid-rootkit/lists"}