http://mowyaze2i4wfnyl5mgmhv67cditlvs4zicqbjj57lzhxfvfphd34dvqd.onion/www/News/2003/20031202
SucKIT Root-Kit SucKIT is a root-kit presented in Phrack issue 58, article 0x07
("Linux on-the-fly kernel patching without LKM", by sd & devik). This
is a fully working root-kit that is loaded through /dev/kmem, i.e. it
does not need a kernel with support for loadable kernel modules. It
provides a password protected remote access connect-back shell
initiated by a spoofed packet (bypassing most firewall
configurations), and can hide processes, files and connections.