RC4
0001-01-01 cryptography
RC4 is an easy to implement bidirectional stream cipher algorithm. Similar to XOR, its ease of use and implementation make it a popular choice for malware authors.
Several open source implementations of RC4 are available:
https://github.com/droberson/ELFcrypt/blob/master/ELFcrypt.h#L216
The undocumented Windows NTAPI SystemFunction032 and SystemFunction033 provide implementations of the RC4 algorithm. https://source.winehq.org/WineAPI/SystemFunction032.html
Advanced Encryption Standard
0001-01-01 cryptography
XOR encryption
0001-01-01 cryptography
Linux Persistence: Modular Software
2025-04-17 DFIR CTF persistence linux persistence apache asterisk
Linux Persistence: Web Shells
2025-04-16 DFIR persistence webshell linux persistence webshell apache nginx PHP
Linux Persistence: Rootkits
2025-04-15 DFIR persistence rootkit LKM linux persistence LKM rootkit LD_PRELOAD kprobe ftrace ld.so hooking
Defanging Linux LKM Rootkits With cleanup_module()
2025-04-05 Linux LKM rootkits EDR hooks incident response Linux LKM rootkit