Friday, June 6, 2008

IOS rootkit technical paper

Finally! The technical (in my humble opinion) paper called 'Killing the myth of Cisco IOS rootkits' that I wrote about the subject is available at CORE Security site here.
Enjoy... and send feedback ;)


Anonymous said...

It just do a little static image patching. We had done it yet by hooking passwdcheck() in IOS.

topo said...

hehehe... that works pretty fine, right? ;)
Send me an email if you want to talk about it.

Anonymous said...

Ok, I had already sent you an email, checking your gmail.