I created a keyboard rootkitted detector that consist of a Linux Loadable Kernel Module (LKM), a /proc/is-kbd-rkt file and a simple app that outputs the result. The app looks something like this: In order to try it out you first need: to have installed g++, gcc and make and need to have the linux-headers-`uname -r`Continue reading “Linux: Is Keyboard Rootkitted”