GitHunt

darkelf

Infects an elf64

This program will take a standard elf64 binary, and give it a new main. The new main will load a shared object of the users choice, and run an exported function before it returns to the original main.

Note, this is a proof of concept, and does not cover a lot of edge cases!
If you want to actually be sneaky, don't use this as is!
This does not handle PIE binaries right now.

possible later TODO:
do our own dlopen/dlsym (fixes PIE as well)

Languages

C98.1%Assembly1.2%Makefile0.4%Shell0.3%

Contributors

Created October 13, 2017
Updated January 15, 2024
jordan9001/darkelf | GitHunt