A no-reboot, in-memory Linux persistence PoC leveraging namespace joining, user-namespace elevation, and self‑deletion.
☆65Aug 6, 2025Updated 9 months ago
Alternatives and similar repositories for Linux-persistence
Users that are interested in Linux-persistence are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Released presentations of my talks + code that used during these talks☆15Sep 5, 2024Updated last year
- InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution☆147Updated this week
- Automated script for obfuscating, rebranding and renaming the Havoc C2 Framework to evade AV/EDR and C2 hunters.☆49Aug 13, 2025Updated 9 months ago
- Swiss Army Knife for payload encryption, obfuscation, and conversion to byte arrays – all in a single command (14 output formats supporte…☆222Mar 7, 2026Updated 2 months ago
- Using Chromium-based browsers as a proxy for C2 traffic.☆152Dec 6, 2025Updated 5 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Modular framework for automating triaging, malware analysis, and analyst workflows☆44May 2, 2025Updated last year
- Static-Code-Analysis-Helper helps you perform static code analysis.☆32Feb 20, 2026Updated 3 months ago
- Materials for CVE-2024-30052.☆12Oct 4, 2024Updated last year
- PowerShell-based utility for mapping byte offsets to source code using hex and ASCII context for detection research and red team tooling.☆33Dec 31, 2025Updated 4 months ago
- ETW forensic tool for Volatility3 plugin☆17Nov 15, 2024Updated last year
- A C and Go /proc/pid/maps cloak of invisibilty for shared object files☆22Nov 19, 2025Updated 6 months ago
- A lightweight test harness designed to speed up shellcode development by providing an execution environment with integrated crash diagnos…☆44Jan 15, 2026Updated 4 months ago
- This is a PAM Skeleton Key that can be used for persistence, lateral movement, and privilege escalation.☆48Apr 23, 2026Updated 3 weeks ago
- BeaconatorC2 is a framework for red teaming and adversarial emulation, providing a full-featured management interface, along with a catal…☆93Jan 14, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Indirect-Shellcode-Executor expoits the miss-configuration/vulnerability present on the API Windows method ReadProcessMemory discovered b…☆85Nov 15, 2025Updated 6 months ago
- Rust Weaponization for Red Team Engagements.☆12Nov 14, 2022Updated 3 years ago
- Using Just In Time (JIT) instruction decryption, this shellcode loader ensures that only the currently executing instruction is visible i…☆65Apr 2, 2025Updated last year
- CVE-2025-50168 Exploit PoC — Pwn2Own Berlin 2025 - LPE(Windows 11) winning bug.☆142Nov 3, 2025Updated 6 months ago
- A proof‑of‑concept C2 framework that uses Server‑Sent Events (SSE) and the MCP protocol for agent registration, command dispatch, and res…☆35Apr 28, 2025Updated last year
- C++ tool and library for converting .bin files to shellcode in multiple output formats.☆34Aug 18, 2025Updated 9 months ago
- Vulnerabilities advisories and PoC☆18May 8, 2026Updated last week
- Extension Osint Sync☆54Nov 26, 2025Updated 5 months ago
- A truly Position Independent Code (PIC) NimPlant C2 beacon written in C, without reflective loading.☆66Feb 11, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Stage 0☆169Dec 18, 2024Updated last year
- ☆28Mar 14, 2026Updated 2 months ago
- Synthetic data for object detection and segmentation☆14Oct 5, 2023Updated 2 years ago
- EDR & Antivirus Bypass to Gain Shell Access☆247Sep 30, 2024Updated last year
- This C# tool sprays for admin access over the entire domain☆90Dec 7, 2025Updated 5 months ago
- A Linux kernel rootkit in Rust using a custom made type-2 hypervisor, eBPF XDP and TC programs☆339Feb 27, 2026Updated 2 months ago
- Prototype road engine from 1993. Finally morphed into Road Rash after getting the contract from Ocean via Gary Bracey☆16Sep 23, 2025Updated 7 months ago
- KittyLoader is a highly evasive loader written in C / Assembly☆263Sep 22, 2025Updated 7 months ago
- A TUI for Active Directory collection.☆137Mar 17, 2026Updated 2 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Copy metadata and digital signatures information from one Windows executable to another using Wine on a non-Windows platform☆18Apr 17, 2024Updated 2 years ago
- A simple bug bounty utility tool to remove uninteresting entries from a list of URLs.☆13Jul 22, 2024Updated last year
- Remote DLL Injection with Timer-based Shellcode Execution☆214Jul 18, 2025Updated 10 months ago
- Windows AppLocker Driver (appid.sys) LPE☆78Jul 29, 2024Updated last year
- ☆17Feb 6, 2021Updated 5 years ago
- A simple and handcrafted strace-like eBPF-based syscall tracer☆22Aug 2, 2025Updated 9 months ago
- kubernetes rootkit☆35Dec 18, 2023Updated 2 years ago