f0rb1dd3n / Reptile

LKM Linux rootkit
2.54k stars 572 forks source link

install failed #11

Closed evelynEdison closed 6 years ago

evelynEdison commented 6 years ago

After execute apt-get install linux-headers-$(uname -r),it shows

Reading package lists... Done Building dependency tree Reading state information... Done linux-headers-4.4.0-116-generic is already the newest version (4.4.0-116.140). 0 upgraded, 0 newly installed, 0 to remove and 158 not upgraded.

then I execute ./installer.sh install,it shows

############################################################################ ############################ REPTILE INSTALLER ############################# ############################################################################ writen by: F0rb1dd3n

Compiling... DONE! Copying binaries to /reptile... DONE! Installing... insmod: ERROR: could not insert module /reptile/reptile.ko: Invalid module format ERROR!

Additional information about the system: Linux version 4.4.0-116-generic (buildd@lgw01-amd64-021) (gcc version 5.4.0 20160609 (Ubuntu 5.4.0-6ubuntu1~16.04.9) ) #140-Ubuntu SMP Mon Feb 12 21:23:04 UTC 2018

f0rb1dd3n commented 6 years ago

Hello man,

try to comment the line 107 of the installer.sh

strip bin/$MODULE.ko

run it again and tell me if the problem was solved. I am waiting your test.

See ya!

evelynEdison commented 6 years ago

Hello, I try it and it doesn't work. Another question, how to hide specific files and directories?

f0rb1dd3n commented 6 years ago

Hello, I set up a VM to do this test, and Reptile worked fine. I suggest you to comment the line strip bin/$MODULE.ko that I told you (I will commit the changes to comment this line, just update), run ./install.sh build then run insmod bin/reptile.ko. Maybe you must have to do manual tests.

Without strip, Reptile should run normally.

To hide specific files and directories you just have to rename the file or directory to some name with the word reptile in the beginning. Example: reptile_folder, reptilefile, etc. The installer.sh already create a folder /reptile that will be hidden and copy the scripts to this with the prologue `reptilethat will hidden those files. But if you run those scripts like/reptile/reptile_knock` that will run properly.

I think I helped you. Let me know if you have more trouble with it.

F0rb1dd3n

evelynEdison commented 6 years ago

Hello, I have downloaded the latest source code and done manual tests by following your suggestion, but it failed again. Anyway, thanks for your great help.

f0rb1dd3n commented 6 years ago

Hey man, just few questions:

Let me know if you figure it out. Feel free to mail me if you need. ;)

F0b1dd3n

evelynEdison commented 6 years ago

Sorry for the delay. I reboot the system and it works now. thx.

f0rb1dd3n commented 6 years ago

hahahahaha,

Nice. I am glad this problem was solved. Enjoy Reptile!