himitsushell

关于

shc simply wraps a shell script in C and turns it into a binary. As a result, if you monitor the kernel with tools like auditd or bpftrace, the shell script is still visible. I solved this by combining a shell interpreter (such as BusyBox) and the shell script into a single static binary. Because the shell script is never passed to the operating system's /bin/sh or /bin/bash, it remains invisible even when monitoring the kernel. I also added LLVM-based obfuscation and anti-debugging to make reverse engineering more difficult.

收录记录

1. HelloGitHub·用户投稿

   2026年7月27日 · 1 次收录

2. 阮一峰周刊·用户投稿

   2026年7月27日 · 1 次收录

3. Show HN

   2026年8月5日 · 1 次收录