Skip to content

Shared Library Stager for Linux

jm33-m0 edited this page Jan 19, 2025 · 2 revisions

stager.so Overview

stager.so is a shared library designed to securely deliver the emp3r0r agent ELF executable and execute it covertly in memory. Here's how it works:

Execution

The library creates a child process to load and execute the emp3r0r agent.

Use Case

A common method is to load stager.so into existing processes such as Nginx, SSHD, etc., to avoid detection.

Customization Instructions

Step 1: Modify Parameters

Open ./loader/elf/stager.c and modify the following parameters:

  • HTTP Download Parameters: Update these to align with your deployment requirements.
  • AES Passphrase: Change this to a secure, unique passphrase.

Step 2: Compile the Library

Run make stager_so to generate the stager.so file.

Step 3: Deployment

  • Use stager.so on Linux targets.
  • You'll need another stager to load the stager.so library into the desired process.