Sign-In
Cart
Linux Rootkits: Userland Foundations - Volume 1
Paperback
Operating SystemsComputer Security
Publisher: Independently Published
Published: May 6 2026
Pages: 560
Weight: 1.63
Height: 1.25 Width: 6.00 Depth: 9.00
Language: English
Understanding Linux rootkits to detect them better.
What if the danger did not come from malware hidden deep inside the system, but from a perfectly legitimate Linux mechanism?
A binary that lies. A shell that logs activity silently. An editor that reacts when opening a simple text file. A runtime that loads code before the application even starts.
This is the starting point of Linux Rootkits - Userland Foundations.
A book written for defenders
This first volume explores the mechanisms that allow code to execute where you do not expect it.
LD_PRELOAD, LD_AUDIT, sitecustomize.py, NODE_OPTIONS, Vim autocmd, Bash completion, inputrc, and Zsh hooks: each chapter starts from a concrete anomaly, follows the trail, shows the code, then explains how to detect and neutralize the technique.
This book is for SOC analysts, blue teamers, system administrators, SREs, DevOps engineers, cybersecurity students, and Linux-curious technical readers.
You will not only learn to ask which process is running. You will also learn to ask who was allowed to execute before it.
Inside Volume 1
- Dynamic loading with LD_PRELOAD, /etc/ld.so.preload, and LD_AUDIT
- Invisible entry points in Python and Node.js
- Interactive shell mechanisms: DEBUG trap, PROMPT_COMMAND, PATH, function shadowing, programmable completion, Readline, and Zsh
- Vim hooks triggered by opening a simple file
- Polymorphic Bash and the limits of textual signatures
A progression by investigation
Each chapter follows a concrete method: observe the anomaly, inspect the traces, read the code, run a mini-lab, then switch to the defender's side.
The commands are explained, expected outputs are shown, diagrams clarify the execution path, and common mistakes are addressed directly.
Autonomous and isolated labs
The book is self-contained. No repository to clone. No custom Docker image. No external file required.
The mini-labs run inside a disposable ubuntu:24.04 Docker container, with harmless, visible code designed for learning.
What this book is not
This is not an attack manual. It is a manual for auditing, detection, and neutralization.
The goal is not to learn how to hide a rootkit. The goal is to understand why it works, where it hooks, what traces it leaves, and how to take it down.
Usage framework
All manipulations must remain inside a disposable Docker container.
Also in
Operating Systems
RHCSA Red Hat Enterprise Linux 10: Training and Exam Preparation Guide (EX200), Fourth Edition
Ghori, Asghar
Paperback
I Have an App Idea: The Essential Guide to Building an App Without Tech Skills
Spann, Amanda
Paperback
Microsoft Windows 11 - Tips & Tricks: Quickstudy Laminated Computer Reference Guide
Gatto, Katie
Other
The Practice of System and Network Administration: Devops and Other Best Practices for Enterprise It, Volume 1
Limoncelli, Thomas
Hogan, Christina
Chalup, Strata
Paperback
Laptops for Seniors in Easy Steps, 9th Edition: Covers All Laptops with the Windows 11 2024 Update
Vandome, Nick
Paperback
Linux Basics for Hackers, 2nd Edition: Getting Started with Networking, Scripting, and Security in Kali
Occupytheweb
Paperback
Microsoft Copilot Studio Step by Step: Customizing Copilot and Creating Agents
Crosbie, Lisa
Paperback
Samsung Galaxy A17 5G User Guide: A Comprehensive, Step-by-Step Manual with Practical Tips for Beginners and Seniors
Gavriel, John
Paperback
RHCSA Red Hat Enterprise Linux 9: Training and Exam Preparation Guide (EX200), Third Edition
Ghori, Asghar
Paperback
The Wireless Cookbook: Build Real Projects and Master Wi-Fi, Bluetooth, and Lora
Zimmerman, Bill
Paperback
Comptia A+ Certification All-In-One Exam Guide, Eleventh Edition (Exams 220-1101 & 220-1102)
Hutz, Andrew
Everett, Travis A.
Hardcover
Exploring Windows 11 - 2025 Edition: The Illustrated, Practical Guide to Using Microsoft Windows
Wilson, Kevin
Paperback
The Cathedral & the Bazaar: Musings on Linux and Open Source by an Accidental Revolutionary
Raymond, Eric S.
Paperback
Microsoft 365 Copilot Adoption: A Practical Guide for Business Leaders and Consultants
Smith, Mark
Smith, Megan
Paperback
The Linux Programming Interface: A Linux and Unix System Programming Handbook
Kerrisk, Michael
Hardcover
What On Earth is a Mainframe?: An Introduction to IBM Z Mainframes and z/OS Operating System for Total Beginners
Stephens, David
Paperback
Windows 11 Manual For Seniors: A Beginners Guide to Navigate Your Computer with Step-by-Step Instructions
Wells, Larry
Paperback
Linux Mint Cinnamon Edition: A Complete Guide for Beginners and Advanced Users
Rodgers, David A., Jr.
Paperback
Android Studio Panda Essentials - Java Edition: Developing Android Apps Using Android Studio Panda and Java
Smyth, Neil
Paperback
Mac for Seniors - Sonoma Edition: The illustrated, Step-by-step guide on how to use MacOS (Large Print Edition)
Wilson, Kevin
Paperback
Mastering Linux Security and Hardening - Third Edition: A practical guide to protecting your Linux system from cyber attacks
Tevault, Donald a.
Paperback
Master Zorin OS 18: A Complete Hands-On Guide to Linux Mastery with Zorin OS 18
Mykel, Ross
Paperback
Windows Internals: System Architecture, Processes, Threads, Memory Management, and More, Part 1
Russinovich, Mark
Solomon, David
Yosifovich, Pavel
Paperback
The Accidental Administrator: Cisco Router Step-by-Step Configuration Guide
Crawley, Don R.
Paperback
Cyberdeck Grimoire: A Beginner's Field Manual to Building Your Own Portable Computer: A Beginner's Field Manual to Building Your Own
Lane Publishing, Zinnia
Paperback
Windows 11 Tips, Tricks & Shortcuts in Easy Steps: 1000+ Tips, Tricks and Shortcuts
Vandome, Nick
Paperback
Effective Shell: A Practical User's Guide to Working Smarter on the Command Line
Kerr, Dave
Paperback
How to Build Android Applications with Kotlin - Third Edition: A hands-on guide to developing, testing, and publishing production-grade Android 16 app
Dumbravan, Alexandru
Forrester, Alex
Boudjnah, Eran
Paperback
Comptia A+ Complete Study Guide: Core 1 Exam 220-1101 and Core 2 Exam 220-1102
Buhagiar, Jon
Docter, Quentin
Paperback
MacBook Neo User Guide: Seniors and Beginners Easy to follow Manual With ILLUSTRATIONS to Master Their Device Quickly [Tips and Trips included]
Klaywood Philip, Sans
Paperback
Linux Kernel Programming - Second Edition: A comprehensive and practical guide to kernel internals, writing modules, and kernel synchronization
Billimoria, Kaiwan N.
Paperback
Linux: A Complete Guide to Learn Linux Commands, Linux Operating System and Shell Scripting Step-by-Step
Ayden, Nicholas
Paperback
A Handbook for Mainframe z/OS Enterprise Architects - Architecture and Design of Large-Scale Environments
Sahoo, Natabar
Paperback
Don't Be Afraid of the Mainframe: The Missing Introduction for IT Leaders and Professionals
de Greef, Niek
Paperback
Android Phone User Guide for Seniors: A Beginner-Friendly Guide to Calling, Texting, Photos, Apps & Online Safety
Foster, Henry L.
Paperback
Developing Inclusive Mobile Apps: Building Accessible Apps for IOS and Android
Whitaker, Rob
Paperback
Linux: The ultimate guide to Linux for beginners, Linux hacking, Linux command line, Linux operating system, and more!
Newport, Craig
Paperback
Mastering Windows Server 2022 - Fourth Edition: Comprehensive administration of your Windows Server environment
Krause, Jordan
Paperback
Learning the VI and VIM Editors: Power and Agility Beyond Just Text Editing
Robbins, Arnold
Hannah, Elbert
Paperback
Powershell Cookbook: Your Complete Guide to Scripting the Ubiquitous Object-Based Shell
Holmes, Lee
Paperback
Chatgpt: A Guide to Making Money With Chatgpt (Creative Ways for Teens and Young Adults to Make Money With Chatgpt)
Trotter, Thomas
Paperback
Understanding the Linux Kernel: From I/O Ports to Process Management
Cesati, Marco
Bovet, Daniel P.
Paperback
Learn FileMaker Pro 2024: The Comprehensive Guide to Building Custom Databases
Munro, Mark Conway
Paperback
Practical Linux System Administration: A Guide to Installation, Configuration, and Management
Hess, Kenneth
Paperback
Debian 13.3 "Trixie" Desktop Handbook: A Practical Guide to Installing, Securing, and Mastering the Debian Linux Desktop - From Install to Advanced Ad
Rodgers, David A., Jr.
Paperback
iPhone for Seniors - iOS 15 Edition: The illustrated, Step-by-step guide on how to use iPhone (Large Print Edition)
Wilson, Kevin
Paperback
Arduino Software Internals: A Complete Guide to How Your Arduino Language and Hardware Work Together
Dunbar, Norman
Paperback
Canva User Guide For Beginners: Design Stunning Graphics for Social Media, Business, and More
Caden, Clara
Paperback
Head First Android Development: A Learner's Guide to Building Android Apps with Kotlin
Griffiths, Dawn
Griffiths, David
Paperback
Hotwire Native for Rails Developers: Build Native Mobile Apps Using Your Server
Masilotti, Joe
Paperback
Mastering Embedded Linux Development - Fourth Edition: Craft fast and reliable embedded solutions with Linux 6.6 and The Yocto Project 5.0 (Scarthgap)
Vasquez, Frank
Simmonds, Chris
Paperback
The Ultimate Linux Shell Scripting Guide: Automate, Optimize, and Empower tasks with Linux Shell Scripting
Tevault, Donald a.
Paperback
Ubuntu 26.04 LTS: A Comprehensive Guide for Beginners and Advanced Users
Rodgers, David A., Jr.
Paperback
iPad for Seniors - iPadOS 16 Edition: The illustrated, Step-by-step guide on how to use iPad (Large Print Edition)
Wilson, Kevin
Paperback