• Escalate to root:

• Protect/Unprotect LKM:

• Hide LKM:

• Hide directories/files:

• Persistance:

• Reverse TCP:

• persiste : Add rootkit to init.rc
• system : Execute single command
  • command
• protect_rootkit
• unprotect_rootkit
• get_root
• hide_rootkit : hide userland process (ps etc.)
• get_shell : get sh shell
• ls
  • dir
• coffee : test function
  • count
• help

Non-privileged user creds: nuts:Cat1337