The sc-implant project consists of a loadable Linux kernel module and a companion toolchain, internally referred to as sc-client, for managing the module. The objective of this project is to provide an easy-to-use implant to be used as a home base for further operations when red-teaming and conducting penetration tests.

The sc-implant project targets the Debian Buster Linux-based operating system. The following dependencies are required to build the project.

$ sudo apt-get update -y && sudo apt-get dist-upgrade -y
$ sudo apt-get install -y --no-install-recommends linux-headers-4.19.0-6-amd64 build-essential upx-ucl

Alternatively, Vagrant can be used to build a ready-made virtual machine. A Vagrantfile has been provided in the root of the project repository.

$ make # Builds the loadable Linux kernel module.
$ make sc-client # Builds the userland toolchain.

Documentation is generated using Sphinx. The documentation can be built from the root directory of the repository.

$ sudo apt-get install python3-sphinx
$ pip3 install hawkmoth sphinx-rtd-theme --user
$ make -C doc html

The built documentation can be viewed in a web browser by opening doc/build/html/index.html.

See CONTRIBUTING.md.

See CHANGELOG.md.

GNU GPLv3.

The project uses ketopt for argument parsing in both the userland toolchain and the kernel module. The example payload is merlin.