A deep dive into the concept that Linux kernels act as interpreters for initrds, explored through a self-replicating 'malware' shell script that uses kexec to recursively boot itself. The post reverse-engineers a 20MB shell script that embeds a cpio archive containing a kernel and init script, which uses kexec to replace the
Table of contents
Reverse engineering rkx.gzSo what really is this thing?Interpret it a different wayThe strangest loopConclusionSort: