Hunting for Linux Extended File Attributes

No ratings

Presented at Hack.lu 2025 by

In this lightning talk will show how xattr's can be used to hide a payload, then I'll introduce a quick script that will help to find potentially malicious xattr's on a filesystem.