✨ Introduction
Welcome to the EpiRootkit project, an educational rootkit developed as part of our curriculum at EPITA. This rootkit operates at the kernel level to provide a hybrid command and control (C2) channel, combining classic TCP communication with stealthy DNS-based communication. The team members are Thibault Colcomb, Oleg Krajic, and Evann Marrel.
🚀 Features
- 🌐 TCP and/or DNS channel communication
- 🖥️ Remote command execution
- 🐚 Reverse shell
- 🙈 Hide directories and files (dynamic)
- 🚫 Block access to directories or files (dynamic)
- ✏️ Modify the display of targeted files (dynamic)
- 🕵️ Hide the module from the modules list
- 🔐 AES encryption for communications (TCP and DNS)
- 🔑 Remote authentication
- 🕸️ Remote control web interface
- 🚪 Hide network ports
- ⌨️ Keylogger
- 🔄 Persistence through reboot
- 🖼️ ASCII art
- 📁 File upload and download
- 🛡️ Virtual environment detection
- 🔍 Remote file explorer
🏢 Organization
This documentation was generated with Doxygen. It is organized into several sections listed below. What is not mentioned here corresponds to the automatically generated source code documentation.
- **Overview** - General introduction to the documentation.
- **Architecture** - Git repository structure.
- **Setup** - Virtualization configuration and project setup.
- **Usage** - Available commands, web interface operation.
- **Environment** - Communication setup between machines and OS information.
- Details - Technical information about rootkit feature implementation.
