Knark v2.4.3 port is a usable kernel-based rootkit for Linux which is based on knark-0.59. Hides files in the filesystem, strings from /proc/net for netstat, processes, and program execution redirects. Also includes a kernel module to protect Linux 2.4 from knark.
8f5c94bc7b4e6109a69cfbf0ba826b846e208300a3e71f1087b0b034814e1d8d