GPU based RAT/Rootkit (Team JellyFish)

[Glariful]

This is a github link but im still gonna hide it to promote conversation

Hidden Content
You'll be able to see the hidden content once you reply to this topic or

Please Login or Register to see this Hidden Content

.

Advantages of gpu stored memory:

• No gpu malware analysis tools available on web
• Can snoop on cpu host memory via DMA
• Gpu can be used for fast/swift mathematical calculations like xor'ing or parsing
• Stubs
• Malicious memory may be retained across warm reboots. (Did more conductive research on the theory of malicious memory still being in gpu after shutdown)

Requirements for use:

• Have OpenCL drivers/icds installed (Fun fact: Mac OS X boxes come pre-installed with OpenCL)
• Nvidia or AMD graphics card (intel supports amd's sdk)

 

• Disclaimer: Educational purposes only; authors of this project/demonstration are in no way, shape or form responsible for what you may use this for whether illegal or not.

[Karma]

thx 4 the share, i will have a look on it

[Glariful]

thx 4 the share, i will have a look on it

Remember to rep if you like it~

[Karma]

Remember to rep if you like it~

 

Done

 

Btw, here is the Windows Version

Please Login or Register to see this Hidden Content

Edit:// I tried to compile it under Kali but I get this error:

Please Login or Register to see this Hidden Content

But there is no file called cl.h in this package ...

 

Do you know some help for this error?

Edited by Karma, 13 May 2015 - 07:51 PM.

[pruned_40835422]

Thanks for the link, it's an interesting idea.

 

--

 

@Karma

Come on dude, it's the easiest Googleable error.

OpenCL is basically an equivalent of CUDA ; it's an API for GPU programming.

...so, yea, you should download the lib+include, link it, and it should work.

Edited by H00, 14 May 2015 - 04:29 PM.

[priv8area]

thanks

[sanouga97]

checking it

 

[encoreleet]

hello 

[havxwolfe]

About cl.h error , Just download cuda and compile in windows In mingwsys console ,
You need the opencl libs so find the *Forgot what file sorry* Opencl* in the cuda libs dir and compile def to lib and a ,
Then copy to the mingsys enviroment

[besimbicer]

tyyy