This document discusses how to build a rootkit, which is described as a super malware, polymorph, and stealth process. It recommends using assembly language as the master of security and C as a basic language. A rootkit can perform polymorphism, stealth processes, hiding access, keylogging, and install considerations. Kernel rootkits are discussed for Linux, Solaris, and Windows platforms.

1. Rootkit ? How To Build it
Hanafi Ali Jan, ST, C|EH
Security Analyst #HaNJiaN

3. Rootkit
Rootkit = Super Malware
Rootkit = Super Polymorph
Rootkit = Super Stealth Process
Rootkit = Driver for ALL Platform

4. How To Build ? 
• Asm = Master of “Security”
• C = Semi Core & Basic Lenguage for it
• C# = Controller for it

5. Rootkit Power 
• Polimorph
• Double Self
• Stealth Process
• Hidding Access
• Keylogging
• Installing Considerations
• Ghost Tracker
• E-mail Reporting
• Filter Drivers
• Users Hooks
• Kernel Hooks
• Control Processing

6. Kernel Rootkit in Platform
Knark (Linux)
Adore (Linux)
Plasmoid’s Solaris Loadable (Solaris)
Windows NT kernel-level RootKit (Windows)