VX Heaven

Library Collection Sources Engines Constructors Simulators Utilities Links Forum

Shared library call redirection using ELF PLT infection

Silvio Cesare
Matrix Zine [1]
November 1999

[Back to index] [Comments]


This paper describes a method of shared library call redirection using ELF infection that redirects the Procedure Linkage Table (PLT) of an executeable. Thus, redirection is not resident outside of the infected executeable. This has the advantage over the LD_PRELOAD redirection technique in that no environment variables are modified, thus remaining more hidden than previous techniques. An implementation is provided for x86/Linux.

[Read the article]

By accessing, viewing, downloading or otherwise using this content you agree to be bound by the Terms of Use! aka