Modreveal – Utility to find hidden Linux kernel modules

[Kev]

modreveal

 

modreveal  is a small utility that prints the names of hidden LKMs if any exists.

 

 

Usage

 

make
sudo ./modreveal

 

Notes

• To test the utility, you can use the Diamorphine rootkit (https://github.com/m0nad/Diamorphine).
• The author runs Arch Linux LTS kernel, so it is only guaranteed to work on Arch Linux LTS kernel. It will most likely work with your kernel too unless you are running something ancient or really new that breaks something.

 

Dowload: modreveal-master.zip

 

or

 

git clone https://github.com/jafarlihi/modreveal.git

 

 

Source

[aelius]

https://github.com/jafarlihi/modreveal/blob/master/user/modreveal.c

 

[Nytro]

Nu face mare lucru dar poate fi util in CTF-uri de exemplu sau in cazuri de dumb rootkits.