mav8557 / father Goto Github PK

Helllo,

I've tried to compile Father on CentOS 7 4.4.241-1.el7.elrepo.x86_64. but I got an error message below. I can compile it on Debian 10 4.4.241-1.el7.elrepo.x86_64. It would be great if we can use it on CentOs, as well. Thx!

$ make
gcc -Wall -ldl -o rk.so -fPIC -shared -D_GNU_SOURCE father.c
father.c:128:51: error: conflicting types for ‘restrict’
int (*o_lstat)(const char *restrict, struct stat *restrict);
^
father.c:128:28: note: previous definition of ‘restrict’ was here
int (*o_lstat)(const char *restrict, struct stat *restrict);
^
father.c:129:32: error: expected ‘;’, ‘,’ or ‘)’ before ‘path’
int lstat(const char *restrict path, struct stat *restrict buf) {

I wonder if it is possible to add a function to hide multiple ports. It would be very useful. Thank you.

Hello mav8557,
thank you very much for removing unneeded restricted pointers I can compile Father on CentOS 7, gcc 4.8.5 20150623 now. However, port hiding does not work either on CentOS or Debian 10 4.19.0-6-amd64 #1 SMP Debian 4.19.67-2.

[root@osboxes Father]# netstat -tulpn | grep 0.0.0.0:65088
tcp 0 0 0.0.0.0:65088 0.0.0.0:* LISTEN 2833/ncat

[root@osboxes Father]# grep HIDDENPORT config.h
#define HIDDENPORT "FE40"

Thank you.

How to compile Father for using on all x64 linux systems?

The code can't be compile using gcc version 11.

gcc -Wall -fPIC -shared -D_GNU_SOURCE -o bin/access.o src/access.c -c
src/access.c: In function ‘access’:
src/access.c:23:18: error: ‘_STAT_VER’ undeclared (first use in this function)
   23 |         __lxstat(_STAT_VER, pathname, &s_buf);
      |                  ^~~~~~~~~
src/access.c:23:18: note: each undeclared identifier is reported only once for each function it appears in
make: *** [Makefile:16: bin/access.o] Error 1

Update the documentation to describe all features, including connection and process hiding, as well as new features like the PAM backdoor and all dependencies.

🤡

delete your repo

Implement a test suite for rootkit capabilities, and follow TDD when developing new features.

os: centos 6.7 x86_64

[root@Father-master]# make
gcc -Wall -ldl -o rk.so -fPIC -shared -D_GNU_SOURCE father.c
father.c:128: error: conflicting types for ‘restrict’
father.c:128: note: previous definition of ‘restrict’ was here
father.c:129: error: expected ‘;’, ‘,’ or ‘)’ before ‘path’
make: *** [father] Error 1