ring is a ring 0 (kernel mode) rootkit for the linux kernel from version 2 to 5+
features
- give a user root privileges
- hide itself
- hide/unhide files and directories
- hide files in /dev/, /proc/devices, and /sys/class
- hide/unhide processes
- hide/unhide network connections
- hidden persistence
- backconnect
- sniff ssh passwords
- vm detection
Copyright (C) gbr 2023