Inspired by excellent CobaltStrike training, I set out to work out an easy way to inject into processes in Linux. There’s been quite a lot of experimentation with this already, usually using ptrace(2) or LD_PRELOAD, but I wanted something a little simpler and less error-prone, perhaps trading ease-of-use for flexibility and works-everywhere. Enter GDB and shared object files (i.e. libraries).| Mrs Quis Will Think of a Better Title
Now is the time for all good hackers to come to the aid of their readers.| Mrs Quis Will Think of a Better Title
In which we run a normal ELF binary on Linux without touching the filesystem(except /proc).| Mrs Quis Will Think of a Better Title