Diamorphine icon indicating copy to clipboard operation
Diamorphine copied to clipboard

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

Results 10 Diamorphine issues
Sort by recently updated
recently updated
newest added

Syscall params modified to match the pt_regs struct of ARM Write protection extended, the set_kernel_text functions cover the syscall table too Tested on 5.1.0 armv7l

EVERYTHING worked fine on: Debian 6, 64Bit, 2.6.32-5-amd64 Debian 7, 64Bit, 3.2.0-4-amd64 Ubuntu 10, 64Bit, 2.6.32-46-server Ubuntu Server 12, 64Bit, 3.5.0-23-generic Ubuntu 14.1, 64Bit, 3.16.0-28-generic Fedora 20, 32Bit, 3.11.10-301.fc20.i686+PAE I've...

Hi, we've found an issue that happens during a scan of `/proc` on CentOS 7 (kernel 3.10.0-1160.36.2.el7.x86_64): the program sometimes crashes (https://github.com/wazuh/wazuh/issues/9737) and sometimes falls into an infinite loop (https://github.com/wazuh/wazuh/issues/9032),...

Running on 4.9.140-tegra kernel, I cannot get this rootkit to initialize properly. The device is an Nvidia Jetson NX, on an arm64 architecture. I understand that it is a custom...

My process runs on nvidia GPU. [centos@wenyangmao01 ~]$ kill -31 87315 [centos@wenyangmao01 ~]$ ps aux|grep 87315 centos 87354 0.0 0.0 112724 988 pts/1 S+ 02:44 0:00 grep --color=auto 87315 [centos@wenyangmao01...

![image](https://user-images.githubusercontent.com/7395852/187499313-17be1b88-5332-4fb2-9a20-0e8db59098aa.png) orelse compilation fails. Maybe get_syscall_table_bf() should set the symbol globally to be used in main or something similar.

Dear Author, I hope this message finds you well. I am writing to report an issue I encountered while attempting to compile your Diamorphine module. Here is the specific error...

Linux localhost 4.14.180-perf-g75d251435f84 #1 SMP PREEMPT Fri Dec 3 02:11:21 CST 2021 aarch64 system crashes and reboots on module insertion.

linux-headers-6.8.0-31-generic dont'work. https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/diff/kernel/trace/trace_syscalls.c?id=v6.8.8&id2=v6.6.1 diff --git a/kernel/trace/trace_syscalls.c b/kernel/trace/trace_syscalls.c index de753403cdafbd..9c581d6da843a3 100644 --- a/kernel/trace/trace_syscalls.c +++ b/kernel/trace/trace_syscalls.c @@ -556,7 +556,7 @@ static int perf_call_bpf_enter(struct trace_event_call *call, struct pt_regs *re { struct syscall_tp_t {...

When compiling for ubuntu22.04 Linux 6.5.0-35 I received a gcc warning about mismatched compilers and an error about an unknown option like so: ``` warning: the compiler differs from the...