Are you a rootkit developer?
Are you a rootkit developer? Can you fulfill my idea in the Ideas and Challenges page? I am looking for some articles or any resources that can help me solve the following.
- Hide a process
- Hide a file
- Hide a registry
- Hide a port
- Contact userland application, vice versa
- Keystroke logging
If you by chance come across any articles or books related to this please do let me know!
Creating your own driver loader in C | Driver Loader | Source Code | Rootkit
Technically, there's 2 way of loading a rootkit according to Greg Hoglund when he wrote Rootkits: Subverting the Windows Kernel book. One is called The Quick-And-Dirty Way to Load a Driver. This method allows you to "load a driver into the kernel without having to create any registry keys. "Pageable" refers to memory that can be swapped to disk. If a driver is pageable, any part of the driver could be paged out (that is, swapped from memory to disk). Sometimes when memory is paged out, it cannot be accessed; an attempt to do so will result in the infamous Blue Screen of Death (a system crash)" by using an undocumented API call.
