From 067a6312a89f98f0e17b83aee055ae6bfcc0fce1 Mon Sep 17 00:00:00 2001 From: Sebastian Lenzlinger <74497638+sebaschi@users.noreply.github.com> Date: Tue, 6 Jun 2023 12:31:38 +0200 Subject: [PATCH] Add journal entry after first testing. --- doc/dev_journal.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/doc/dev_journal.md b/doc/dev_journal.md index 758cb71..86146a8 100644 --- a/doc/dev_journal.md +++ b/doc/dev_journal.md @@ -115,3 +115,11 @@ Ported the bash script for user space detection to python for easier string and #### TODO: Test in VM and finnishing touches to smooth things out. +## Tuesday, 6. June 2023 +### Sebastian +Did a first test in a Fedora 37 VM. At first it didn't work. Then I tested it on my normal machine and it also stopped working. It turned out that it was just not getting the root priviledges right, even tho it passed the root check. Testing on the VM was then succesfull in that it found the pids. Killing the process wasn't succesfull and will need further testing and fixes. +#### TODO: +1. Fix the bug where the killing of the process doesn't work. +2. Build config files, maybe check if there is a better way to to do configs than with .txt files. +3. Keep testing. Goal is that if run as '''$ sudo ./kldetect.py -v''' one is prompted to kill the keylogger, and then rerunning the programm would give the output '''[+] No suspicious programms found''' +4. Note to self: Problem with killing is that not using pids-program dict to choose which program to kill. \ No newline at end of file