An awesome series of articles about linux rootkit internals (w | Cha1ned’s
An awesome series of articles about linux rootkit internals (with capturing all fresh changes in kernel). This resource provides a great base for reverse engineers who want to understand architecture of this malware class. links: https://xcellerator.github.io/posts/linux_rootkits_01 (first) https://xcellerator.github.io/posts/linux_rootkits_11/ (last)
