How detect a LD_PRELOAD rootkit and hide from ldd & /proc

November 26, 2024 · 6 min · 0xMatheuZ

A simple way to detect and remove LKM rootkit KoviD (Outdated)

August 26, 2024 · 4 min · 0xMatheuZ

Linux Threat Hunting Persistence

February 16, 2024 · 14 min · 0xMatheuZ