From 4853dd58d0bdb37f3aac2062b5cce32bdad0a155 Mon Sep 17 00:00:00 2001 From: rootTHC <57636391+rootTHC@users.noreply.github.com> Date: Sat, 25 Jan 2020 14:31:46 +0000 Subject: [PATCH] Update README.md hide your arguments. --- README.md | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index b9ec9de..aab1e31 100644 --- a/README.md +++ b/README.md @@ -93,7 +93,14 @@ In this example we execute *nmap* but let it appear with the name *syslogd* in * **1.iii. Hide your arguments** -Continuing from above..FIXME: can this be done witout LD_PRELOAD and just in Bash? +Download [zap-args.c](src/zap-args.c) +This example will execute *nmap* but will make it appear as 'syslogd' without any arguments in the *ps alxww* output. + +``` +$ gcc -Wall -O2 -fpic -shared -o zap-args.so zap-args.c -ldl +$ LD_PRELOAD=./zap-args.so exec -a syslogd nmap -T0 10.0.0.1/24 +``` +Note: There is a gdb variant as well. Anyone? ---