Alternatives and similar repositories for 0x00sec_code

Users that are interested in 0x00sec_code are comparing it to the libraries listed below

• chokepoint / Jynx2
  JynxKit2 is an LD_PRELOAD userland rootkit based on the original JynxKit. The backdoor has been replaced with an "accept()" system hook.
  ☆173Updated 12 years ago
• croemheld / lkm-rootkit
  A LKM rootkit for most newer kernel versions.
  ☆176Updated 7 years ago
• emptymonkey / mimic
  Hide processes as a normal user in Linux.
  ☆258Updated 10 months ago
• xpn / ssh-inject
  A ptrace POC by hooking SSH to reveal provided passwords
  ☆181Updated 8 years ago
• tkmru / awesome-linux-rootkits
  a summary of linux rootkits published on GitHub
  ☆177Updated 5 years ago
• AonCyberLabs / Cexigua
  Linux based inter-process code injection without ptrace(2)
  ☆250Updated 7 years ago
• rek7 / fireELF
  fireELF - Fileless Linux Malware Framework
  ☆667Updated 6 years ago
• ixty / mandibule
  linux elf injector for x86 x86_64 arm arm64
  ☆336Updated 7 years ago
• chokepoint / azazel
  Azazel is a userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit. It is more robust and has additional feat…
  ☆785Updated last year
• alanvivona / pwnshop
  Exploit Development, Reverse Engineering & Cryptography
  ☆252Updated 4 years ago
• EgeBalci / Cminer
  Cminer is a tool for enumerating the code caves in PE files.
  ☆151Updated 2 years ago
• Antonin-Deniau / cave_miner
  Search for code cave in all binaries
  ☆282Updated 10 months ago
• itm4n / UsoDllLoader
  Windows - Weaponizing privileged file writes with the Update Session Orchestrator service
  ☆389Updated 4 years ago
• NoviceLive / research-rootkit
  LibZeroEvil & the Research Rootkit project.
  ☆593Updated 3 years ago
• JLospinoso / gargoyle
  A memory scanning evasion technique
  ☆869Updated 8 years ago
• Binject / binjection
  Injects additional machine instructions into various binary formats.
  ☆282Updated last year
• peterferrie / win-exec-calc-shellcode
  A small, null-free Windows shellcode that executes calc.exe (x86/x64, all OS/SPs)
  ☆412Updated last year
• hasherezade / process_doppelganging
  My implementation of enSilo's Process Doppelganging (PE injection technique)
  ☆610Updated 2 years ago
• 0xeb-bp / bluekeep
  Public work for CVE-2019-0708
  ☆292Updated 5 years ago
• sailay1996 / awesome_windows_logical_bugs
  collect for learning cases
  ☆584Updated 11 months ago
• unix-thrust / beurk
  BEURK Experimental Unix RootKit
  ☆382Updated 8 years ago
• Binject / backdoorfactory
  A from-scratch rewrite of The Backdoor Factory - a MitM tool for inserting shellcode into all types of binaries on the wire.
  ☆377Updated 3 years ago
• wetw0rk / Sickle
  Payload Development Framework
  ☆752Updated this week
• guitmz / ezuri
  A Simple Linux ELF Runtime Crypter
  ☆251Updated 3 months ago
• r00tkillah / HORSEPILL
  HORSEPILL rootkit PoC
  ☆228Updated 8 years ago
• hatRiot / token-priv
  Token Privilege Research
  ☆826Updated 7 years ago
• ly4k / CurveBall
  PoC for CVE-2020-0601- Windows CryptoAPI (Crypt32.dll)
  ☆890Updated 5 years ago
• LloydLabs / Windows-API-Hashing
  This is a simple example and explanation of obfuscating API resolution via hashing
  ☆235Updated 5 years ago
• zznop / drow
  Injects code into ELF executables post-build
  ☆232Updated last year
• NytroRST / ShellcodeCompiler
  Shellcode Compiler
  ☆1,105Updated 9 months ago