---
id: 1988
title: "How to write a rootkit without really trying"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2019/01/17/how-to-write-a-rootkit-without-really-trying/"
published_at: "2019-01-17T12:50:53Z"
tags: ["open-source", "fuzzing", "linux", "fault-injection", "kernel", "krf", "syscall"]
phying_url: "https://phying.com/item/1988"
lang: en
---

# How to write a rootkit without really trying

## Summary

Trail of Bits open-sources KRF, a fault injection tool that intercepts syscalls from the Linux kernel to expose faulty assumptions and bugs in programs.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2019-01-17T12:50:53Z
- **Original:** https://blog.trailofbits.com/2019/01/17/how-to-write-a-rootkit-without-really-trying/
- **Phying News:** https://phying.com/item/1988