search

f0rb1dd3n / Reptile

LKM Linux rootkit
2.53k stars 571 forks source link

can't hide udp port?? #67

Closed koushui closed 4 years ago

koushui commented 5 years ago

Thanks to the author,Good job,very cool~! but,can't hide udp port?? i try "/reptile/reptile_cmd conn hide" hiden a udp listen，only hide TCP PORT,hide udp not work!

By the way, if can increase access to SSH, SSHD password keylogger features, the same with command line switch, then a more perfect~!

iusearch commented 5 years ago

I'm not clear with the first question. I don't think the feature you mentioned is necessary. SSHD sniffering may increase the possibility which the rootkit would be discovered by the admin. There are many approaches to do that.

f0rb1dd3n commented 5 years ago

Thanks your words man.

So, about the udp connection hiding, I will consider add this feature in next commits. About SSH keylogger, I am not sure yet, even cause you can do some strace and get the clean text password (and hide the strace process with reptile).

f0rb1dd3n commented 5 years ago

I just added UDP hiding feature on this commit 165b539.

so, check it out!

koushui commented 5 years ago

3X ，Test is OK~!