Awesome-Mirrors
/
awesome-linux-rootkits
mirror of https://github.com/milabs/awesome-linux-rootkits.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update reptile.md

This commit is contained in:
Ilya V. Matveychikov 2018-07-02 20:18:51 +04:00 committed by GitHub
parent 370deabc0d
commit f8f78b49c6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
details/reptile.md
View File

@ -46,8 +46,9 @@ Filtering of directory entries by hoocking:
## Hiding of processes and process trees
Filtering PID-like numeric entries while listing `/proc`.
Filtering PID-like numeric entries while listing `/proc`:
- getdents/getdents64 hook used
Hidden tasks are marked using `task->flags \| 0x10000000`.
Hidden tasks are marked using `task->flags`, bit `0x10000000` used.
Not able to hide all threads and children of hidden (parent) process.