linuxthor

Hackers-TTGO-Watch. Firmware for a ttgo-watch2020-v1 / ttgo-watch2020-v2 / ttgo-watch2020-v3 smartwatch based on ESP32 from LilyGo.

asm. assembly language examples, mostly Linux

uul. ELF binary that runs on several different *nix flavours. Works out which variant it's being run on and runs code specific to that.

rkspotter. Rootkit spotter - experimental Linux rootkit finder LKM

iamdynamic. Linux assembly language minimal 'dynamic ELF' example plus experiments

My-TTGO-Watch-Dev. How-to on making apps for My-TTGO-Watch

sixnix. Multifarious x86-64 ELF binary that can be built once and run on six different *nix variants. Behaves differently if running on Linux, BSD or SunOS

metalfinger. Linux kernel module to run a userspace application when a magic packet arrives

procsplice. Tool for working with memory of a running Linux process

rkbreaker. Rootkit breaker - experimental Linux anti-rootkit tool based on kprobes

camisado. Linux kernel module that sends a UDP packet without being seen by userspace

obnubilate. Linux kernel module that decrypts an AES encrypted payload from a magic packet

pam-happyhour2for1. Once a day it's happy hour! This Linux PAM module will give you root! Inspired by Brendan Gregg's pam_happy_hour.c for Solaris

lkmim. Load kernel module in memory

OpenLSD. Assembly "Hello World" that runs on both Linux and OpenBSD

BsidesLeeds-eBPF. Presentation and demos from BSides Leeds presentation on eBPF for security monitoring

fml. LD_PRELOAD hack to save malloc and free operations in an sqlite database

asmbonsai. Small (73 byte) 64 bit Linux assembly hello world

slimpack. Toolkit for building encrypted file loaders for single source file NASM projects (uses AES-NI instructions)

shellsee. LD_PRELOAD hack to save shell commands in an sqlite database

party-parrots. A Parrot Party for your terminal

emptythreat. Linux proof of concept that loads and executes encrypted shellcode from extended file attributes

inode-ctime. Demo of altering inode ctime in kernel

StrangeELF. Material for the talk "Strange ELF" at DC151 13/2/2019

bluetooth. Material from Bluetooth talks at dc151 and SteelCon. Includes a collection of public domain diagrams of Bluetooth classic in SVG.

devzerothing. Overwriting pointers in a file_operations structure to hide a communication channel

odds-and-ends. Misc, unsorted experiments

sysrq-roulette. Adds a SysRq handler with random kernel panic. Do you feel lucky?