sanderdemeester/evil_sysread

Evil Linux kernel module that hooks sys_read system call and lets a user get a reverse shell or execute shellcode in the kernel.

evil_sysread's Issues

hello,there have a compile error,can you deal with it.

[root@test evil_sysread]# make
make -C /lib/modules/2.6.32-431.el6.x86_64/build M=/home/taibai/Desktop/rootkits/evil_sysread modules
make[1]: Entering directory /usr/src/kernels/2.6.32-431.el6.x86_64' CC [M] /home/taibai/Desktop/rootkits/evil_sysread/evil_syscall_read.o /home/taibai/Desktop/rootkits/evil_sysread/evil_syscall_read.c: In function ‘init_module’: /home/taibai/Desktop/rootkits/evil_sysread/evil_syscall_read.c:118: error: ‘gate_desc’ has no member named ‘a’ /home/taibai/Desktop/rootkits/evil_sysread/evil_syscall_read.c:118: error: ‘gate_desc’ has no member named ‘b’ /home/taibai/Desktop/rootkits/evil_sysread/evil_syscall_read.c:119: warning: cast to pointer from integer of different size /home/taibai/Desktop/rootkits/evil_sysread/evil_syscall_read.c:127: warning: cast to pointer from integer of different size /home/taibai/Desktop/rootkits/evil_sysread/evil_syscall_read.c: In function ‘shellcode_execute_backdoor’: /home/taibai/Desktop/rootkits/evil_sysread/evil_syscall_read.c:287: warning: passing argument 2 of ‘inet_pton_pv’ from incompatible pointer type /home/taibai/Desktop/rootkits/evil_sysread/evil_syscall_read.c:193: note: expected ‘unsigned char *’ but argument is of type ‘struct in_addr *’ /home/taibai/Desktop/rootkits/evil_sysread/evil_syscall_read.c:290: warning: passing argument 2 of ‘sk->ops->connect’ from incompatible pointer type /home/taibai/Desktop/rootkits/evil_sysread/evil_syscall_read.c:290: note: expected ‘struct sockaddr *’ but argument is of type ‘struct sock_addr_in *’ /home/taibai/Desktop/rootkits/evil_sysread/evil_syscall_read.c:312: warning: passing argument 1 of ‘lookup_address’ makes integer from pointer without a cast /usr/src/kernels/2.6.32-431.el6.x86_64/arch/x86/include/asm/pgtable_types.h:336: note: expected ‘long unsigned int’ but argument is of type ‘char *’ /home/taibai/Desktop/rootkits/evil_sysread/evil_syscall_read.c:318: warning: function declaration isn’t a prototype make[2]: *** [/home/taibai/Desktop/rootkits/evil_sysread/evil_syscall_read.o] Error 1 make[1]: *** [_module_/home/taibai/Desktop/rootkits/evil_sysread] Error 2 make[1]: Leaving directory /usr/src/kernels/2.6.32-431.el6.x86_64'