logo
<fnord>

<fnord> is a loadable kernel module designed to sit stealthily on a machine and detect malicious LKMs as they're loaded. Good for honeypots and the like. Written for Linux kernel version 2.2, so it's officially old. Now that it is finally free, it will be updated to a modern kernel, have features added, etc. Enough people are apparently still interested enough in the old version that we're offering it for download now.

Download <fnord>

Read the presentation we gave at Black Hat Vegas '01.

Questions or comments can be directed to Todd MacDermid or Eric Brandwine mailing list