-
Notifications
You must be signed in to change notification settings - Fork 57
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add hidden TCP/UDP connections and hide them in SS commands such as Netsat. Complete installation and usage instructions #101
Comments
Good idea, I will write a usage instructions. In the meantime you can check some demo here https://github.com/carloslack/kv-demos/tree/master About tcp/udp: it is hidden automatically, you don't need a separate command for that. You can check with tcpdump To hide a process you first need to turn /proc interface on: Thanks |
My C2 connection destination will display TCP as 8.8.8.8:1234 The administrator can easily detect my c2 using commands such as ss and netstat - an |
Currently I dont think it is possible, KoviD hides its own backdoors connections. |
I noticed that some Rookits support hidden TCP or UDP connections? Command:/elite/elite _cmd connhide The following project does not support the latest kernel Hide TCP and UDP connections |
... and maybe others that end-up depending on sys_recvmsg Address #101
I haven't seen the installation documentation or usage instructions
README.md
Inside, there is no clear definition of how to execute it?
What commands do I need to hide the process
What command do I need to hide TCP-UDP connection? I don't quite understand
The text was updated successfully, but these errors were encountered: