home.social

#diamorphine — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #diamorphine, aggregated by home.social.

fetched live
  1. Thomas Strömberg @[email protected] ·

    This weekend I was nerdsniped into adding detection for #eBPF #rootkits to the sunlight project:

    github.com/tstromberg/sunlight

    Probably the most difficult part was just getting any eBPF-based rootkit to function. Most open-source PoC's fail miserably in recent Ubuntu LTS builds. Almost none of them build properly on arm64, either.

    As an added bonus, the latest release also does a better job detecting signals-based rootkits, like #Diamorphine.

    #diamorphine #rootkits #ebpf