BSides Rochester 2019 – Goofkit: Getting goofy with kernel functions
iSpeech.org
Talk Description: Two easy techniques to make your rootkit stealthier and more robust! Goofkit is a new Linux Kernel Module (LKM) rootkit being released. It uses both inline hooking and trampolining to create a more robust, and stealthy rootkit. This talk will cover how traditional LKM rootkits are made, what can be done better, and why. This talk is aimed at those who are interested in building a rootkit, looking to improve their own, or just learn more about how Linux works.
Bio: Hulto is a student who’s trying to learn about security and share a little bit in the process.
source
0 Responses to BSides Rochester 2019 – Goofkit: Getting goofy with kernel functions