3 ms·
Yes, as long as dlopen and dlsym aren't also hooked. You could also use asm to directly invoke sys_ptrace, since this rootkit doesn't have any kernel component
by CUViper 13y ago
Yes, as long as dlopen and dlsym aren't also hooked.
You could also use asm to directly invoke sys_ptrace, since this rootkit doesn't have any kernel components.