Are you a rootkit developer?
Are you a rootkit developer? Can you fulfill my idea in the Ideas and Challenges page? I am looking for some articles or any resources that can help me solve the following.
- Hide a process
- Hide a file
- Hide a registry
- Hide a port
- Contact userland application, vice versa
- Keystroke logging
If you by chance come across any articles or books related to this please do let me know!
Analyzing network packets
Those of you that think of yourself as a hacker, do you know what does a network packet look like? Have you ever read network packets in your life, do you know how they work? Take a look in the TCP packet below and try to figure out what the packet is doing as well as getting the source ip address and port of the sender.
[code]
00 1c f0 39 8e 45 00 1c f0 8a a1 71 08 00 45 00
00 34 06 6e 40 00 80 06 9a 0e c0 a8 01 02 45 a2
52 fb c0 a7 00 50 a1 f6 7c bb 00 00 00 00 80 02
20 00 15 25 00 00 02 04 05 b4 01 03 03 02 01 01
04 02
[/code]
Tips: Think of the packet as an Ethernet frame.
