diff options
Diffstat (limited to 'other/adore-ng/FEATURES')
| -rw-r--r-- | other/adore-ng/FEATURES | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/other/adore-ng/FEATURES b/other/adore-ng/FEATURES new file mode 100644 index 0000000..1e88216 --- /dev/null +++ b/other/adore-ng/FEATURES | |||
| @@ -0,0 +1,30 @@ | |||
| 1 | |||
| 2 | If you never used adore before, here's a list of supported | ||
| 3 | things: | ||
| 4 | |||
| 5 | o runs on kernel 2.4.x UP and SMP systems | ||
| 6 | o first test-versions successfully run on 2.6.0 | ||
| 7 | o file and directory hiding | ||
| 8 | o process hiding | ||
| 9 | o socket-hiding (no matter whether LISTENing, CONNECTED etc) | ||
| 10 | o full-capability back door | ||
| 11 | o does not utilize sys_call_table but VFS layer | ||
| 12 | o KISS principle, to have as less things in there as possible | ||
| 13 | but also being as much powerful as possible | ||
| 14 | |||
| 15 | new with adore-ng 0.30: | ||
| 16 | |||
| 17 | o syslog filtering: logs generated by hidden processes never appear | ||
| 18 | on the syslog UNIX socket anymore | ||
| 19 | o wtmp/utmp/lastlog filtering: writing of xtmp entries by hidden processes | ||
| 20 | do not appear in the file, except you force it by using special hidden | ||
| 21 | AND authenticated process (a sshd back door is usually only hidden thus | ||
| 22 | xtmp entries written by sshd don't make it to disk) | ||
| 23 | o (optional) relinking of LKMs as described in phrack #61 aka LKM infection | ||
| 24 | to make it possible to be automatically reloaded after reboots | ||
| 25 | |||
| 26 | The build and installation process is usually as easy as | ||
| 27 | './configure && make && ./startadore' and/or | ||
| 28 | './configure && make && ./relink' so you can set up your honey-pot | ||
| 29 | test-environment very easily. | ||
| 30 | |||
