Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230

 

 

 

How to write a RootKit?

Off-Topic discussions about science, technology, and non Debian specific topics.
Post Reply
Message
Author
Dem

How to write a RootKit?

#1 Post by Dem »

How can i write a rootkit?

thamarok

#2 Post by thamarok »

For what use do you want to do a rootkit?
Asking for a full program (code) which can take full control of a system isn't something that happens everyday. Although I do know something in the sector of rootkits, I don't want to write code for you unless I know exactly what you want and if I can trust you. Do you have knowledge with C or C++?

User avatar
Lost Dog
Posts: 249
Joined: 2006-08-11 21:54
Location: North of the Columbia River

#3 Post by Lost Dog »

thamarok wrote:Although I do know something in the sector of rootkits, I don't want to write code for you unless I know exactly what you want and if I can trust you. Do you have knowledge with C or C++?
Make sure he does not work for Sony!

thamarok

#4 Post by thamarok »

Lost Dog wrote:
thamarok wrote:Although I do know something in the sector of rootkits, I don't want to write code for you unless I know exactly what you want and if I can trust you. Do you have knowledge with C or C++?
Make sure he does not work for Sony!
Maybe I missed something - Why?

plugwash
Posts: 2507
Joined: 2006-09-17 01:10
Contact:

#5 Post by plugwash »

rootkits come in a variety of complexities ranging from those that simply replace standard tools (easy both to write and defeat) through those that replace standard libs (harder) to those that hide in the kernel (hardest).

the awkward thing in writing a rootkit is you not only have to cover up the stuff you want the rooted box for but you also have to cover up the rootkit itself.

User avatar
Jackiebrown
Posts: 1246
Joined: 2007-01-02 04:46
Location: San Antonio, TX

#6 Post by Jackiebrown »

thamarok wrote:
Lost Dog wrote:
thamarok wrote:Although I do know something in the sector of rootkits, I don't want to write code for you unless I know exactly what you want and if I can trust you. Do you have knowledge with C or C++?
Make sure he does not work for Sony!
Maybe I missed something - Why?
Sony has been in trouble in the past for putting rootkits on their cds

http://en.wikipedia.org/wiki/2005_Sony_ ... on_scandal

User avatar
Optional
Posts: 326
Joined: 2007-02-05 05:02

Re: How to write a RootKit?

#7 Post by Optional »

Dem wrote:How can i write a rootkit?
http://www.amazon.com/Rootkits-Subverti ... 020&sr=8-1

Good book, I got it for $8 off of Amazon Marketplace. It focuses on Windows though, as it's the primary rootkit platform. ;)

Basically, just write and load your own kernel module/driver. Have it hook the necessary kernel-level functions to hide itself from userspace programs. Keep tampering with the host OS to a minimum.

There's plenty of informational freely available online (for educational purposes only, of course).

User avatar
DeanLinkous
Posts: 1570
Joined: 2006-06-04 15:28

#8 Post by DeanLinkous »

Lost Dog wrote: Make sure he does not work for Sony!
He doesn't work for sony! But he has a interview next week and figures the job is his if he can figure this out. :D

dmn_clown
Posts: 522
Joined: 2006-12-03 23:40

#9 Post by dmn_clown »

You could always dis-assemble the most famous rootkit of all... Windows Vista and see how they did it.

Oh wait, that is a trojan... n/m.

Post Reply