-
-
Notifications
You must be signed in to change notification settings - Fork 274
Shared Library Stager for Linux
jm33-m0 edited this page Jan 19, 2025
·
2 revisions
stager.so is a shared library designed to securely deliver the emp3r0r agent ELF executable and execute it covertly in memory. Here's how it works:
The library creates a child process to load and execute the emp3r0r agent.
A common method is to load stager.so into existing processes such as Nginx, SSHD, etc., to avoid detection.
Open ./loader/elf/stager.c and modify the following parameters:
- HTTP Download Parameters: Update these to align with your deployment requirements.
- AES Passphrase: Change this to a secure, unique passphrase.
Run make stager_so to generate the stager.so file.
- Use
stager.soon Linux targets. - You'll need another stager to load the
stager.solibrary into the desired process.