Linux: How's My Memory
ID: 4d34c8d9-2ef4-5ade-a6f7-fc2321e90a3f
STIX ID: report--4d34c8d9-2ef4-5ade-a6f7-fc2321e90a3f
Feed Name: TrustedSec blog
This report explains four Linux shared-object in-memory injection techniques (ptrace-based Linux Inject, ReflectiveSOInjection, GDB-driven injection, and LD_PRELOAD), detailing how each works, benefits and limitations, detection guidance for defenders, and a proof-of-concept script to find RWX memory regions and suspect shared objects.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.