Skip to content

Commit f6aec01

Browse files
author
Michal Malik
authored
Update
1 parent a576bfd commit f6aec01

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

README.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -69,6 +69,7 @@ Work in progress as I am actively collecting these.
6969
- "Position Independent Code (PIC) in shared libraries " http://eli.thegreenplace.net/2011/11/03/position-independent-code-pic-in-shared-libraries/
7070
- "Position Independent Code (PIC) in shared libraries x64" http://eli.thegreenplace.net/2011/11/11/position-independent-code-pic-in-shared-libraries-on-x64/
7171
- "Relocations, relocations" http://www.mindfruit.co.uk/2012/06/relocations-relocations.html
72+
- "DT_GNU_HASH" http://deroko.phearless.org/dt_gnu_hash.txt
7273
- *Good night reading*: "Linux on the Half-ELF" http://mammon.github.io/tales/linux_re.txt
7374

7475
#### Packers, obfuscation, and encryption
@@ -84,7 +85,8 @@ Work in progress as I am actively collecting these.
8485
- "Linux ELF Runtime Crypter" https://www.guitmz.com/linux-elf-runtime-crypter/
8586
- "Linux Based Inter-Process Code Injection Without Ptrace(2)" https://blog.gdssecurity.com/labs/2017/9/5/linux-based-inter-process-code-injection-without-ptrace2.html
8687
- "ELF in-memory execution" https://blog.fbkcs.ru/elf-in-memory-execution/
87-
- Super Stealthy Droppers https://0x00sec.org/t/super-stealthy-droppers/3715
88+
- "Super Stealthy Droppers" https://0x00sec.org/t/super-stealthy-droppers/3715
89+
- "Running ELF executables from memory" https://www.guitmz.com/running-elf-from-memory/
8890

8991
#### Exploitation
9092

@@ -140,6 +142,7 @@ Work in progress as I am actively collecting these.
140142
- VX Heaven collection of viruses http://vxer.org/vl.php?dir=Virus.Linux
141143
- http://vxer.org/herm1t/
142144
- Source code of infection techniques http://vxer.org/herm1t/examples.tar.gz by herm1t
145+
- "PT_NOTE to PT_LOAD Injection in ELF" https://www.symbolcrash.com/2019/03/27/pt_note-to-pt_load-injection-in-elf/
143146

144147
#### Linux kernel, rootkits, and LKM development
145148

0 commit comments

Comments
 (0)