-
-
Notifications
You must be signed in to change notification settings - Fork 254
Shared Library Stager for Linux
Jimmy Mi edited this page Dec 24, 2024
·
1 revision
stager.so
is a shared library designed to securely deliver the emp3r0r
agent ELF executable and execute it covertly in memory. Here's how it works:
-
Execution:
The library creates a child process to load and execute theemp3r0r
agent. -
Use Case:
A common method is to loadstager.so
into existing processes such as Nginx, SSHD, etc., to avoid detection.
-
Open
./loader/elf/stager.c
and modify the following parameters:- HTTP Download Parameters: Update these to align with your deployment requirements.
- AES Passphrase: Change this to a secure, unique passphrase.
-
Compile the library:
- Run
make stager_so
to generate thestager.so
file.
- Run
-
Deployment:
- Use
stager.so
on Linux targets. - You'll need another stager to load the
stager.so
library into the desired process.
- Use