RE: Zendar userspace rootkit 03-20-2015, 10:32 PM
#6
(03-20-2015, 08:46 PM)ring-1 Wrote: https://github.com/ring-1/zendar
Enjoy, friends.
Changed method for preventing the user from removing ld.so.preload & removed ptrace() from the kit.
Still using strstr(). I'll change my method eventually.
Thanks man, I will check it out.
![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)