March 01, 2005
Solaris 10 LKM rootkits [ Software ]
Here's an interesting paper on hiding Solaris 10 loadable kernel modules and corresponding slideshow [both are PDF documents] presented at 21C3 (21st Chaos Communication Congress), a hacker con in Berlin. Good specifics on how to hide a LKM in Solaris 10, I'm sure everyone who would be interested in this stuff already knows the theory of how LKMs make for great rootkits.
Posted by edobbs at March 1, 2005 02:35 PM
Original content copyright ©1995-2006 Eric Dobbs, except where otherwise noted.
