@@ -69,6 +69,7 @@ Work in progress as I am actively collecting these.
69
69
- "Position Independent Code (PIC) in shared libraries " http://eli.thegreenplace.net/2011/11/03/position-independent-code-pic-in-shared-libraries/
70
70
- "Position Independent Code (PIC) in shared libraries x64" http://eli.thegreenplace.net/2011/11/11/position-independent-code-pic-in-shared-libraries-on-x64/
71
71
- "Relocations, relocations" http://www.mindfruit.co.uk/2012/06/relocations-relocations.html
72
+ - "DT_GNU_HASH" http://deroko.phearless.org/dt_gnu_hash.txt
72
73
- * Good night reading* : "Linux on the Half-ELF" http://mammon.github.io/tales/linux_re.txt
73
74
74
75
#### Packers, obfuscation, and encryption
@@ -84,7 +85,8 @@ Work in progress as I am actively collecting these.
84
85
- "Linux ELF Runtime Crypter" https://www.guitmz.com/linux-elf-runtime-crypter/
85
86
- "Linux Based Inter-Process Code Injection Without Ptrace(2)" https://blog.gdssecurity.com/labs/2017/9/5/linux-based-inter-process-code-injection-without-ptrace2.html
86
87
- "ELF in-memory execution" https://blog.fbkcs.ru/elf-in-memory-execution/
87
- - Super Stealthy Droppers https://0x00sec.org/t/super-stealthy-droppers/3715
88
+ - "Super Stealthy Droppers" https://0x00sec.org/t/super-stealthy-droppers/3715
89
+ - "Running ELF executables from memory" https://www.guitmz.com/running-elf-from-memory/
88
90
89
91
#### Exploitation
90
92
@@ -140,6 +142,7 @@ Work in progress as I am actively collecting these.
140
142
- VX Heaven collection of viruses http://vxer.org/vl.php?dir=Virus.Linux
141
143
- http://vxer.org/herm1t/
142
144
- Source code of infection techniques http://vxer.org/herm1t/examples.tar.gz by herm1t
145
+ - "PT_NOTE to PT_LOAD Injection in ELF" https://www.symbolcrash.com/2019/03/27/pt_note-to-pt_load-injection-in-elf/
143
146
144
147
#### Linux kernel, rootkits, and LKM development
145
148
0 commit comments