GitHub topics: rootkit
kouzhudong/AntiHook
Enum and Remove Hook in Windows
Language: Batchfile - Size: 17.2 MB - Last synced at: about 19 hours ago - Pushed at: about 20 hours ago - Stars: 38 - Forks: 9

mempodippy/vlany
Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)
Language: C - Size: 1.17 MB - Last synced at: about 18 hours ago - Pushed at: over 4 years ago - Stars: 957 - Forks: 195

grisuno/LazyOwn
LazyOwn RedTeam/APT Framework is the first RedTeam Framework with an AI-powered C&C, featuring rootkits to conceal campaigns, undetectable malleable implants compatible with Windows/Linux/Mac OSX, and self-configuring backdoors. With its Web interface and powerful Console Client, it is the best combination for your RedTeam/APT campaigns.
Language: HTML - Size: 204 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 56 - Forks: 24

slep2-0/WindowsRootkit
Read the README
Language: C++ - Size: 191 KB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 3 - Forks: 0

nullcel/dollarnine
A self-propagating worm driven by an embedded rootkit
Language: C++ - Size: 3.49 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 0 - Forks: 0

Gui774ume/ebpfkit
ebpfkit is a rootkit powered by eBPF
Language: C - Size: 7.63 MB - Last synced at: 2 days ago - Pushed at: about 2 years ago - Stars: 794 - Forks: 92

ait-aecid/caraxes
Academic research rootkit using ftrace-hooking to hide files and processes via magic word or user/group. Tested until Linux 6.11.
Language: C - Size: 135 KB - Last synced at: about 12 hours ago - Pushed at: 21 days ago - Stars: 19 - Forks: 0

bitdefender/hvmi
Hypervisor Memory Introspection Core Library
Language: C - Size: 13.5 MB - Last synced at: 3 days ago - Pushed at: about 1 year ago - Stars: 645 - Forks: 68

memN0ps/illusion-rs 📦
Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust (Codename: Illusion)
Language: Rust - Size: 2.85 MB - Last synced at: 3 days ago - Pushed at: 9 months ago - Stars: 260 - Forks: 33

joaoviictorti/shadow-rs
Windows Kernel Rootkit in Rust
Language: Rust - Size: 459 KB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 594 - Forks: 62

sapellaniz/lkm_unhide
LKM unhide is a LKM Rootkits Detection Tool for Linux Kernels 5.x/6.x.
Language: C - Size: 1000 Bytes - Last synced at: 6 days ago - Pushed at: 6 days ago - Stars: 0 - Forks: 0

XaFF-XaFF/Kernel-Process-Hollowing
Windows x64 kernel mode rootkit process hollowing POC.
Language: C++ - Size: 27.3 KB - Last synced at: about 10 hours ago - Pushed at: almost 2 years ago - Stars: 189 - Forks: 27

Reakt0rPhantom/Stuxnet-Rootkit
Stuxnet extracted binaries by reversing & Stuxnet Rootkit Analysis
Size: 0 Bytes - Last synced at: 6 days ago - Pushed at: 6 days ago - Stars: 0 - Forks: 0

MikeHorn-git/LKD
Linux Kernel development lab
Language: C - Size: 27.3 KB - Last synced at: 6 days ago - Pushed at: 6 days ago - Stars: 5 - Forks: 0

ExpLife0011/awesome-windows-kernel-security-development
windows kernel security development
Size: 3.25 MB - Last synced at: 6 days ago - Pushed at: over 2 years ago - Stars: 2,002 - Forks: 539

rwxrob/bonzai
Dashist CLI framework, batteries included
Language: Go - Size: 3.86 MB - Last synced at: 6 days ago - Pushed at: 5 months ago - Stars: 226 - Forks: 22

ait-testbed/attackmate
AttackMate is an attack orchestration tool that executes full attack-chains based on playbooks.
Language: Python - Size: 8.8 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 35 - Forks: 5

cr0nx/awesome-linux-attack-forensics-purplelabs
This page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.
Size: 95.7 KB - Last synced at: 8 days ago - Pushed at: about 2 years ago - Stars: 284 - Forks: 38

milabs/awesome-linux-rootkits
awesome-linux-rootkits
Size: 74.2 KB - Last synced at: 5 days ago - Pushed at: 4 months ago - Stars: 1,827 - Forks: 246

gmh5225/Driver-SoulExtraction
SoulExtraction is a windows driver library for extracting cert information in windows drivers
Language: C - Size: 91.8 KB - Last synced at: about 23 hours ago - Pushed at: about 2 years ago - Stars: 23 - Forks: 6

eversinc33/Banshee
Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.
Language: C++ - Size: 666 KB - Last synced at: 9 days ago - Pushed at: 9 days ago - Stars: 535 - Forks: 78

UEFI-code/Linux-Danger
Forget Ring3. Run EVERYTHING in Ring0!
Language: C - Size: 147 MB - Last synced at: 10 days ago - Pushed at: 10 days ago - Stars: 0 - Forks: 1

sudoskys/Root
?什么你说Root?我不到啊 | 致力于编写全面详细的Root教程文档 | 刷机 | 安卓
Size: 54.3 MB - Last synced at: 4 days ago - Pushed at: 10 months ago - Stars: 435 - Forks: 25

Qiunzman/Simple-RunPE-Process-Hollowing
The RunPE program is written in C# to execute a specific executable file within another files memory using the ProcessHollowing technique.
Language: C# - Size: 39.1 KB - Last synced at: 10 days ago - Pushed at: 10 days ago - Stars: 0 - Forks: 0

daem0nc0re/VectorKernel
PoCs for Kernelmode rootkit techniques research.
Language: C# - Size: 17.5 MB - Last synced at: 7 days ago - Pushed at: 4 months ago - Stars: 374 - Forks: 60

UmaRex01/YMC
A plug-and-play, extendible and customizable Windows driver that lands your malware capabilities in kernel-land.
Size: 4.88 KB - Last synced at: 11 days ago - Pushed at: 12 days ago - Stars: 0 - Forks: 0

b3c001/bico_lkm
Bico_LKM é um rootkit escrito em C e possui funcionamento em nivel de kernel (ring0)
Language: C - Size: 37.1 KB - Last synced at: 8 days ago - Pushed at: 12 days ago - Stars: 3 - Forks: 0

carloslack/KoviD
Red-Team Linux kernel rootkit
Language: C - Size: 26.8 MB - Last synced at: 12 days ago - Pushed at: 21 days ago - Stars: 362 - Forks: 60

sad0p/d0zer
Elf binary infector written in Go.
Language: Go - Size: 136 KB - Last synced at: 4 days ago - Pushed at: 4 months ago - Stars: 209 - Forks: 36

memN0ps/eagle-rs 📦
Rusty Rootkit - Windows Kernel Rookit in Rust (Codename: Eagle)
Language: Rust - Size: 450 KB - Last synced at: 6 days ago - Pushed at: almost 2 years ago - Stars: 551 - Forks: 70

alfonmga/hiding-cryptominers-linux-rootkit 📦
Linux rootkit POC to hide a crypto miner's process and CPU usage.
Language: C - Size: 19.5 KB - Last synced at: 7 days ago - Pushed at: over 1 year ago - Stars: 75 - Forks: 39

KastMain/Simple-RunPE-Process-Hollowing
The RunPE program is written in C# to execute a specific executable file within another files memory using the ProcessHollowing technique.
Language: C# - Size: 38.1 KB - Last synced at: 13 days ago - Pushed at: 13 days ago - Stars: 0 - Forks: 0

ldpreload/Medusa
LD_PRELOAD Rootkit
Language: C - Size: 708 KB - Last synced at: 7 days ago - Pushed at: about 1 month ago - Stars: 222 - Forks: 57

jm33-m0/emp3r0r
Linux/Windows post-exploitation framework made by linux user
Language: Go - Size: 144 MB - Last synced at: 19 days ago - Pushed at: 19 days ago - Stars: 1,533 - Forks: 263

mephistolist/tito
In-Memory Rootkit For Linux
Language: C - Size: 215 KB - Last synced at: 19 days ago - Pushed at: 19 days ago - Stars: 69 - Forks: 11

idchoppers/nt_rootkit
A kernel mode rootkit for NT.
Language: C - Size: 97.7 KB - Last synced at: 19 days ago - Pushed at: 19 days ago - Stars: 1 - Forks: 0

gmh5225/CallMeWin32kDriver
Load your driver like win32k.sys
Language: C++ - Size: 23.4 KB - Last synced at: about 23 hours ago - Pushed at: over 2 years ago - Stars: 252 - Forks: 74

memN0ps/matrix-rs 📦
Rusty Hypervisor - Windows Kernel Blue Pill Type-2 Hypervisor in Rust (Codename: Matrix)
Language: Rust - Size: 2.58 MB - Last synced at: 3 days ago - Pushed at: 10 months ago - Stars: 272 - Forks: 31

Idov31/Nidhogg
Nidhogg is an all-in-one simple to use windows kernel rootkit.
Language: C++ - Size: 723 KB - Last synced at: 23 days ago - Pushed at: 23 days ago - Stars: 1,940 - Forks: 283

guill777/ElfDoor-gcc
ElfDoor-gcc is an LD_PRELOAD that hijacks gcc to inject malicious code into binaries during linking, without touching the source code.
Language: C - Size: 519 KB - Last synced at: 24 days ago - Pushed at: 24 days ago - Stars: 0 - Forks: 0

malefax/Adrishya
Author of Project Adrishya a rootkit which use ftrace mechanism to hook syscall; (write this because God commanded me); work for both x86_64 and arm; CREDIT-(Oleksii Lozovskyi{ilammy})FOUNDER OF FTRACE HOOKING
Language: C - Size: 488 KB - Last synced at: 26 days ago - Pushed at: 26 days ago - Stars: 7 - Forks: 0

jussihi/SMM-Rootkit
SMM rootkit similar to LoJax or MosaicRegressor
Language: C - Size: 214 KB - Last synced at: 4 days ago - Pushed at: over 1 year ago - Stars: 117 - Forks: 28

m0nad/Diamorphine
LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)
Language: C - Size: 28.3 KB - Last synced at: 28 days ago - Pushed at: over 1 year ago - Stars: 1,979 - Forks: 450

mrexodia/TitanHide
Hiding kernel-driver for x86/x64.
Language: C - Size: 842 KB - Last synced at: about 1 month ago - Pushed at: 3 months ago - Stars: 2,260 - Forks: 431

Cr4sh/s6_pcie_microblaze
PCI Express DIY hacking toolkit for Xilinx SP605. This repository is also home of Hyper-V Backdoor and Boot Backdoor, check readme for links and info
Language: C - Size: 38.4 MB - Last synced at: about 1 month ago - Pushed at: 12 months ago - Stars: 786 - Forks: 158

Idov31/Jormungandr
Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.
Language: C++ - Size: 48.8 KB - Last synced at: 30 days ago - Pushed at: over 1 year ago - Stars: 225 - Forks: 27

bytecode77/r77-rootkit
Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.
Language: C - Size: 5.08 MB - Last synced at: about 1 month ago - Pushed at: about 2 months ago - Stars: 1,877 - Forks: 426

0xbitx/DEDSEC_ZIPHITE
Linux-based tool that injects covert malicious code into a legitimate Python script.
Size: 2.45 MB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 0 - Forks: 1

mav8557/Father
LD_PRELOAD rootkit
Language: C - Size: 47.9 KB - Last synced at: 29 days ago - Pushed at: about 1 year ago - Stars: 131 - Forks: 32

adamhlt/Basic-Rootkit
POC Ring3 Windows Rootkit (x86 / x64) - Hide processes and files
Language: C++ - Size: 788 KB - Last synced at: 5 days ago - Pushed at: almost 2 years ago - Stars: 55 - Forks: 19

tkmru/awesome-linux-rootkits
a summary of linux rootkits published on GitHub
Size: 3.91 KB - Last synced at: 5 days ago - Pushed at: about 5 years ago - Stars: 176 - Forks: 22

nurupo/rootkit
Linux rootkit for Ubuntu 16.04 and 10.04 (Linux Kernels 4.4.0 and 2.6.32), both i386 and amd64
Language: C - Size: 25.4 KB - Last synced at: about 1 month ago - Pushed at: about 1 year ago - Stars: 798 - Forks: 202

DualHorizon/blackpill
A Linux kernel rootkit in Rust using a custom made type-2 hypervisor, eBPF XDP and TC programs
Language: Rust - Size: 282 KB - Last synced at: about 1 month ago - Pushed at: 4 months ago - Stars: 279 - Forks: 33

Gui774ume/ebpfkit-monitor
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Language: C - Size: 168 KB - Last synced at: about 1 month ago - Pushed at: about 2 years ago - Stars: 128 - Forks: 17

flashnuke/mod-rootkit
Kernel-space x86_64 Linux rootkit leveraging kprobes and ftrace for syscall hooking (hiding entries and reverse shell backdoor)
Language: C - Size: 161 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 7 - Forks: 0

rickmark/mojo_thor
Research about malware that infects the EFI and SMC of Apple MacBooks.
Language: Assembly - Size: 144 MB - Last synced at: 30 days ago - Pushed at: about 1 month ago - Stars: 57 - Forks: 12

xl7dev/WebShell
Webshell && Backdoor Collection
Language: PHP - Size: 23.4 MB - Last synced at: about 1 month ago - Pushed at: about 5 years ago - Stars: 1,877 - Forks: 1,035

theSecHunter/Hades-Windows
Hades HIDS/HIPS for Windows
Language: C++ - Size: 484 MB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 278 - Forks: 92

gmh5225/kli-ex
Expanding Kernel Lazy Importer
Language: C++ - Size: 118 KB - Last synced at: about 23 hours ago - Pushed at: about 2 years ago - Stars: 31 - Forks: 8

skyw4tch3r/RootKits-List-Download
This is the list of all rootkits found so far on github and other sites.
Size: 24.4 KB - Last synced at: about 1 month ago - Pushed at: about 2 years ago - Stars: 1,310 - Forks: 384

h3xduck/Umbra
A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malware and more.
Language: C - Size: 190 MB - Last synced at: about 1 month ago - Pushed at: over 3 years ago - Stars: 123 - Forks: 28

h3xduck/TripleCross
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
Language: C - Size: 86.4 MB - Last synced at: about 1 month ago - Pushed at: about 1 year ago - Stars: 1,830 - Forks: 230

0xbitx/DEDSEC_BOTNET
Linux-based botnet builder designed for creating advanced botnet payloads.
Size: 11.9 MB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 75 - Forks: 12

JKornev/hidden
🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc
Language: C - Size: 665 KB - Last synced at: about 1 month ago - Pushed at: almost 3 years ago - Stars: 1,889 - Forks: 496

gmh5225/FakeEnclave
A poc that abuses Enclave
Language: C++ - Size: 12.7 KB - Last synced at: about 23 hours ago - Pushed at: over 2 years ago - Stars: 38 - Forks: 8

Kareasst/Simple-RunPE-Process-Hollowing
The RunPE program is written in C# to execute a specific executable file within another files memory using the ProcessHollowing technique.
Language: C# - Size: 221 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 2 - Forks: 0

XaFF-XaFF/Cronos-Rootkit
Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.
Language: C++ - Size: 10.6 MB - Last synced at: about 1 month ago - Pushed at: about 3 years ago - Stars: 899 - Forks: 185

0xflux/Ferric-Fox
A windows 11 rootkit in Rust
Language: Rust - Size: 24.4 KB - Last synced at: about 1 month ago - Pushed at: about 2 months ago - Stars: 7 - Forks: 1

MatheuZSecurity/UnhookingLinuxEdr
Attacking the cleanup_module function of a kernel module
Size: 11.7 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 1 - Forks: 0

hiteshd/Android-Rootkit
A rootkit for Android. Based on "Android platform based linux kernel rootkit" from Phrack Issue 68
Language: C - Size: 225 KB - Last synced at: about 1 month ago - Pushed at: over 1 year ago - Stars: 265 - Forks: 103

rphang/evilBPF
Weaponizing the Linux Kernel (Hide Files/PID, SSH backdoors, SSL Sniffer, ...) by poking around eBPF/XDP
Language: C - Size: 1.8 MB - Last synced at: about 1 month ago - Pushed at: 8 months ago - Stars: 50 - Forks: 13

ngn13/shrk
LKM rootkit for modern kernels, with DNS C2 and a simple web interface
Language: C - Size: 898 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 66 - Forks: 9

screetsec/Vegile
This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in metasploit and transparent. Even when it killed, it will re-run again. There always be a procces which while run another process,So we can assume that this procces is unstopable like a Ghost in The Shell
Language: Shell - Size: 48.8 KB - Last synced at: about 1 month ago - Pushed at: over 2 years ago - Stars: 722 - Forks: 164

linuxthor/rkspotter
Rootkit spotter - experimental Linux rootkit finder LKM
Language: C - Size: 86.9 KB - Last synced at: 26 days ago - Pushed at: over 4 years ago - Stars: 28 - Forks: 1

MatheuZSecurity/Imperius
Make an Linux Kernel rootkit visible again.
Language: C - Size: 24.4 KB - Last synced at: about 1 month ago - Pushed at: 2 months ago - Stars: 49 - Forks: 5

MatheuZSecurity/ModTracer
ModTracer Finds Hidden Linux Kernel Rootkits and then make visible again.
Language: C - Size: 36.1 KB - Last synced at: about 1 month ago - Pushed at: 2 months ago - Stars: 73 - Forks: 10

kkent030315/NtSymbol
Resolve DOS MZ executable symbols at runtime
Language: C++ - Size: 32.2 KB - Last synced at: 2 days ago - Pushed at: over 3 years ago - Stars: 95 - Forks: 24

Idov31/NidhoggScript
NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg
Language: C++ - Size: 102 KB - Last synced at: about 1 month ago - Pushed at: about 1 year ago - Stars: 46 - Forks: 9

jivoi/openssh-backdoor-kit
:bomb: just for fun ¯\_(ツ)_/¯
Language: Shell - Size: 15.5 MB - Last synced at: 30 days ago - Pushed at: over 8 years ago - Stars: 264 - Forks: 101

x86byte/Stuxnet-Rootkit
Stuxnet extracted binaries by reversing & Stuxnet Rootkit Analysis
Language: C - Size: 103 KB - Last synced at: 3 days ago - Pushed at: 8 months ago - Stars: 52 - Forks: 12

UEFI-code/WindowsDanger
A REALLY Danger Windows Driver, Turn Any threads Ring0!
Language: C - Size: 98.6 MB - Last synced at: about 1 month ago - Pushed at: about 2 months ago - Stars: 7 - Forks: 3

landhb/HideProcess
A basic Direct Kernel Object Manipulation rootkit that removes a process from the EPROCESS list, hiding it from the Task Manager
Language: C - Size: 6.85 MB - Last synced at: about 1 month ago - Pushed at: about 6 years ago - Stars: 665 - Forks: 116

loneicewolf/EXEC_LKM
A LKM (Loadable Kernel Module) to execute a command as root; I include a example of using netcat and a compiled(with source and steps on how to compile) reverse shell provided in C.
Language: C - Size: 338 KB - Last synced at: about 1 month ago - Pushed at: 7 months ago - Stars: 16 - Forks: 5

ashwani15upadhyay/Mandragora
Mandragora is a magical plant known for its anthropomorphic roots and powerful properties in alchemy and folklore. Believed to scream when uprooted and possess mystical qualities, Mandragora has a rich history in various cultures around the world.
Size: 1000 Bytes - Last synced at: about 2 months ago - Pushed at: about 2 months ago - Stars: 0 - Forks: 0

assarbad/Nidhogg Fork of Idov31/Nidhogg
Nidhogg is an all-in-one simple to use rootkit for red teams.
Language: C++ - Size: 720 KB - Last synced at: about 2 months ago - Pushed at: about 2 months ago - Stars: 7 - Forks: 1

Tastortist/Simple-RunPE-Process-Hollowing
The RunPE program is written in C# to execute a specific executable file within another files memory using the ProcessHollowing technique.
Language: C# - Size: 229 KB - Last synced at: about 2 months ago - Pushed at: about 2 months ago - Stars: 2 - Forks: 0

tasket/Qubes-VM-hardening
Fend off malware at Qubes VM startup
Language: Shell - Size: 136 KB - Last synced at: about 1 month ago - Pushed at: about 2 years ago - Stars: 74 - Forks: 11

JopjeKnopje/c_hooks
LD_PRELOAD "Rootkit" showcase
Language: C - Size: 34.2 KB - Last synced at: 2 months ago - Pushed at: 2 months ago - Stars: 0 - Forks: 0

UsboKirishima/0
An advanced keylogger with both kernel and userspace mode support. Implements stealth functionality and netlink socket communication.
Language: C - Size: 34.2 KB - Last synced at: about 1 month ago - Pushed at: 6 months ago - Stars: 5 - Forks: 0

3itch/icekit
I/O Cache-As-Ram + AMD x86_64 cache line locking | Mirror of https://codeberg.org/3itch/icekit
Language: C - Size: 44.9 KB - Last synced at: 2 months ago - Pushed at: 2 months ago - Stars: 8 - Forks: 0

uraninite/stuxnet
Stuxnet is an extremely sophisticated computer worm that exploits multiple previously unknown Windows zero-day vulnerabilities to infect computers and spread. Its purpose was not just to infect PCs but to cause real-world physical effects. Specifically, it targets centrifuges used to produce the enriched uranium that powers nuclear weapons and reactors.
Language: Assembly - Size: 7.35 MB - Last synced at: about 1 month ago - Pushed at: about 3 years ago - Stars: 62 - Forks: 24

leozin6/WebShell
Web Shell Detector is a PHP script designed to identify PHP, CGI (Perl), ASP/ASPX shells. It uses a "web shells" signature database to detect shells with up to 99% accuracy. The tool features a lightweight and user-friendly interface built with modern JavaScript and CSS technologies.
Language: PHP - Size: 2.27 MB - Last synced at: 2 months ago - Pushed at: 2 months ago - Stars: 0 - Forks: 0

rafael-santiago/kook
A syscall hooking system for FreeBSD, NetBSD and also Linux.
Language: C - Size: 40 KB - Last synced at: about 1 month ago - Pushed at: over 3 years ago - Stars: 17 - Forks: 4

0xbekoo/SSDT-Hooking
The project uses SSDT Hooking to bypass security checks during driver loading by hooking NtLoadDriver and modifying the PreviousMode flag.
Language: C - Size: 74.2 KB - Last synced at: 2 months ago - Pushed at: 3 months ago - Stars: 3 - Forks: 0

kryyyaaaa/golang-rootkit
rootkit written in golang
Language: Go - Size: 30.3 KB - Last synced at: 2 months ago - Pushed at: 2 months ago - Stars: 0 - Forks: 1

therealdreg/lsrootkit
Rootkit Detector for UNIX
Language: C - Size: 121 KB - Last synced at: about 1 month ago - Pushed at: almost 2 years ago - Stars: 61 - Forks: 20

mrg0ne/kld-rootkit
A collection of FreeBSD rootkit kernel modules and utilities
Language: C - Size: 114 KB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 5 - Forks: 1

paulveillard/cybersecurity-malware
An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Malware, Rootkits, and botnets in Cybersecurity.
Size: 13.1 MB - Last synced at: about 2 months ago - Pushed at: about 2 years ago - Stars: 10 - Forks: 2

kaIIsyms/ring
ring0 rootkit
Language: C - Size: 48.8 KB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 0 - Forks: 0

MatheuZSecurity/detect-lkm-rootkit-cheatsheet
Cheat sheet to detect and remove linux kernel rootkit
Size: 1.04 MB - Last synced at: 3 months ago - Pushed at: 5 months ago - Stars: 47 - Forks: 11
