Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Features development for Crumbs #16

Open
0xLyte opened this issue Feb 18, 2016 · 0 comments
Open

Features development for Crumbs #16

0xLyte opened this issue Feb 18, 2016 · 0 comments
Assignees
@0xLyte
Labels
crumbs
Milestone
rkduck v0.1

Comments

@0xLyte
Copy link
Member

0xLyte commented Feb 18, 2016

Crumbs is the userland program controlling rkduck.

Features to add:

  • hide a file
  • unhide a file
  • hide a process
  • unhide a process
  • change the backdoor's mode
  • change the remote ip when in reverse-shell mode.

Other features will be added later.
@0xLyte 0xLyte self-assigned this Feb 18, 2016
@0xLyte 0xLyte added this to the rkduck v0.1 milestone Feb 18, 2016
@0xLyte 0xLyte added the crumbs label Feb 18, 2016
mpgn added a commit that referenced this issue Feb 18, 2016
@mpgn
Add ICMP activation on the backdoor #3 #4
bf8c21b 
to activate the backdoor Oscar need to send valid ICMP packet with valid payload and size
Example : ping 127.0.0.1 -p 78563412 -s 10 -c 1
then he can use the reverse shell
The data  in the ICMP packets are in hexadecimal (little-Indian)

backdoor activation will be updated regarding #16
@mpgn mpgn mentioned this issue Feb 18, 2016
Open
0xLyte pushed a commit that referenced this issue Feb 19, 2016
Crumbs - userland program #16 #14
a8ca849 
Crumbs can send commands to a kernel module.
Authentication is needed before issuing commands.
Command line arguments can be parsed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@0xLyte 0xLyte

Labels
crumbs
Projects
None yet
Milestone
rkduck v0.1
Development

No branches or pull requests
1 participant
@0xLyte