-
-
Notifications
You must be signed in to change notification settings - Fork 256
Shared Library Stager for Linux
jm33-m0 edited this page Jan 19, 2025
·
2 revisions
stager.so
is a shared library designed to securely deliver the emp3r0r
agent ELF executable and execute it covertly in memory. Here's how it works:
The library creates a child process to load and execute the emp3r0r
agent.
A common method is to load stager.so
into existing processes such as Nginx, SSHD, etc., to avoid detection.
Open ./loader/elf/stager.c
and modify the following parameters:
- HTTP Download Parameters: Update these to align with your deployment requirements.
- AES Passphrase: Change this to a secure, unique passphrase.
Run make stager_so
to generate the stager.so
file.
- Use
stager.so
on Linux targets. - You'll need another stager to load the
stager.so
library into the desired process.