Record · corpus.blog/posts/01a0876c-4fbe-70cc-99c5-d8a0cc3cb90e

Dynamic Linker Hijacking Experiments - Evasive Techniques (Part 1)

/home/dganev · published 2 October 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at dganev.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 19
Words captured: 1,839

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://blogs.blackberry.com/en/2022/06/symbiote-a-new-nearly-impossible-to-detect-linux-threat

blogs.blackberry.com

https://attack.mitre.org/techniques/T1574/006/

attack.mitre.org

https://www.baeldung.com/linux/ld_preload-trick-what-is

baeldung.com

https://tldp.org/HOWTO/Program-Library-HOWTO/shared-libraries.html

tldp.org

https://github.com/coreutils/coreutils/blob/master/src/ls.c

github.com

https://man7.org/linux/man-pages/man1/ls.1.html

man7.org

https://github.com/torvalds/linux/blob/master/fs/readdir.c

github.com

https://man7.org/linux/man-pages/man3/readdir.3.html

man7.org

https://github.com/syrull/evasive_techniques/blob/main/Part_1_readdir/intercept_readdir.c

github.com

https://stackoverflow.com/questions/5311515/gcc-fpic-option

stackoverflow.com

https://stackoverflow.com/questions/8836707/explanation-of-d-gnu-source-why-to-use-it-and-when

stackoverflow.com

https://ubuntuforums.org/archive/index.php/t-1054717.html

ubuntuforums.org

https://man7.org/linux/man-pages/man8/ld.so.8.html

man7.org

https://github.com/syrull/evasive_techniques/blob/main/Part_1_readdir/

github.com

https://rafalcieslak.wordpress.com/2013/04/02/dynamic-linker-tricks-using-ld_preload-to-cheat-inject-features-and-investigate-programs/

rafalcieslak.wordpress.com

LD_PRELOAD: The Hero We Need and Deserve Read at the source ↗

blog.jessfraz.com

https://www.exploit-db.com/docs/english/31687-dynamic-link-library-hijacking.pdf

exploit-db.com

https://sysdig.com/blog/hiding-linux-processes-for-fun-and-profit/

sysdig.com

https://www.cadosecurity.com/linux-attack-techniques-dynamic-linker-hijacking-with-ld-preload/

cadosecurity.com