Index --------- Rootkit In Brief Rootkit based on LKM How to get sys_call_table Simple sys_call_table hook Inline hook Patching system_call Abuse Debug Registers Real Rootkit Rootkit based non-LKM Using /dev/kmem and kmalloc Us
Table of Contents 1. Introduction................................................................................................................5 2. The Players .......................................................................................