Daniel Roberson
  • Posts
  • About
  • Notes
  • Projects
  • Time
  • Posts
    About
    Notes
    Projects
    Time

LKM

2024-08-24

A Loadable Kernel Module is a piece of software that extends the existing kernel that can be loaded or unloaded dynamically.


Links to this note

  • runtimekmempatching-cesare1998
  • Linux Persistence: Rootkits
  • kernelinstrumentationusingkprobes-elfmaster2010
  • /sys/module
  • /usr/lib/modules
  • abuseofthelinuxkernel-phrack50_5-halflife
  • Basilisk
  • depmod
  • hidden kernel module
  • ModTracer
  • module struct
  • MODULE_AUTHOR
  • MODULE_DESCRIPTION
  • module_hunter
  • MODULE_LICENSE()
  • MODULE_VERSION
  • modules.dep
  • nitara2
  • reference count
  • artoflinuxkernelrootkit-tmpout4-matheuzsec_humzak711
  • suterusu
  • Defanging Linux LKM Rootkits With cleanup_module()
  • cleanup_module
  • module_exit
  • module_init
  • prevent LKM unloading with rmmod
  • tmhook module
  • /proc/modules
  • UnhookingLinuxEdr
  • unhookinglinuxedrs-matheuzsecurity2025
  • insmod
  • KoviD
  • lsmod
  • Main Index
  • modinfo
  • modprobe
  • rmmod
  • incidentresponse-luttgens2014
  • bvp47-pangulab2022
  • unveiling wolfsbane-sperka2024
  • hiddenkernelmodulesextremwayreborn_g1inko2024
  • learninglinuxbinaryanalysis-oneill2016
  • kmatryoyshka
  • Diamorphine
  • insmod command
  • LKM rootkit
  • Main Index - L
  • Skidmap malware

Recent Posts

Linux Persistence: Modular Software

2025-04-17 DFIR CTF persistence linux persistence apache asterisk

Linux Persistence: Web Shells

2025-04-16 DFIR persistence webshell linux persistence webshell apache nginx PHP

Linux Persistence: Rootkits

2025-04-15 DFIR persistence rootkit LKM linux persistence LKM rootkit LD_PRELOAD kprobe ftrace ld.so hooking

Linux Persistence: Processes

2025-04-11 DFIR persistence processes linux persistence processes

Defanging Linux LKM Rootkits With cleanup_module()

2025-04-05 Linux LKM rootkits EDR hooks incident response Linux LKM rootkit


Home

About

Notes

Projects

Time

© All rights reserved. Powered by Hugo and Erblog.