so, I understand how this rootkits hooks syscalls, I managed to successfully implement my own syscall hooks into it, so there is that
what I still don't understand is how can I make it hook into kernel functions (specifically tcp4_seq_show in order to hide ports), I'd really appreciate it if you could answer this question @m0nad, as all of my searches turned nothing, at least nothing which works for newer kernels, and I lost hope in pretty much everything, fr dude, you are my last hope at finding a solution
ps: I already wrote the hook function, I just have no clue of how to implement it, everything I tried failed to compile
so, I understand how this rootkits hooks syscalls, I managed to successfully implement my own syscall hooks into it, so there is that
what I still don't understand is how can I make it hook into kernel functions (specifically tcp4_seq_show in order to hide ports), I'd really appreciate it if you could answer this question @m0nad, as all of my searches turned nothing, at least nothing which works for newer kernels, and I lost hope in pretty much everything, fr dude, you are my last hope at finding a solution
ps: I already wrote the hook function, I just have no clue of how to implement it, everything I tried failed to compile
thanks in advance