.profile

0001-01-01

the .profile file (may be .bash_profile for bash shells, or another similar name for other shells) runs commands intended to set up a user’s ...

Read More

.profile persistence

0001-01-01

.profile, .bash_profile, and similar files may be abused as a persistence mechanism.

Read More

.service file

0001-01-01

a .service file is a configuration file/systemd unit containing metadata about a service managed by systemd.

Read More

@reboot cron macro

0001-01-01

@reboot is a macro available in some cron implementations that will run commands when the system is booted.

Read More

/DYNAMICBASE

0001-01-01

The /DYNAMICBASE option for Microsoft’s link.exe enables ASLR for executable files.

Read More

/etc/fstab

0001-01-01

fstab (filesystem table) is a configuration file commonly found at /etc/fstab on Linux and Unix-like systems. This is commonly provided by the ...

Read More

/etc/ld.so.preload

0001-01-01

The /etc/ld.so.preload file contains a list of ELF shared objectsthat are intended to be loaded before all other libraries on a dynamically-linked ...

Read More

/etc/ld.so.preload persistence

0001-01-01

Linux and Unix-like malware may abuse /etc/ld.so.preload as a persistence mechanism.

The attacker will add a malicious LD_PRELOAD-like library to this ...

Read More

/proc/PID/cmdline

0001-01-01

The /proc/PID/cmdline file on procfs-enabled systems contains the NULL-delimited command line arguments used to invoke the specified process (PID).

% ...

Read More

/proc/PID/exe

0001-01-01

The /proc/PID/exe file on procfs-enabled systems is a symbolic link to the actual binary of the specified process (PID) on disk.

% ls -l ...

Read More