KernelGhost is a next-generation offensive security framework that combines stealthy eBPF-based rootkit capabilities with advanced hypervisor escape techniques. It enables persistent cross-VM access, stealth process hiding, UEFI firmware backdoors, and more all while evading modern detection systems.
☆32Apr 2, 2025Updated last year
Alternatives and similar repositories for kernelghost
Users that are interested in kernelghost are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Code-snippets for developing eBPF programs☆22Oct 6, 2025Updated last year
- eBPF-based tool can trace GPU memory leaks by processes in Linux.☆15Sep 26, 2025Updated last year
- Data Loss Prevention (DLP) for LLM endpoints.☆22Updated this week
- eBPF container escape detector prototype | Kernel 6.8+ | Early dev phase | Expect kernel panics ⚠️☆16Apr 27, 2026Updated 6 months ago
- Builds a synthetic stack using return address gadgets resolved from ntdll.dll functions. Syscall fires and returns cleanly with no user-…☆12Jun 5, 2026Updated 4 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- XOrCryptEx lightweight C Utility/Algorithm☆13Mar 3, 2022Updated 4 years ago
- Zerokit shared code☆18Mar 28, 2019Updated 7 years ago
- DNS filtering with eBPF☆20Nov 6, 2025Updated 11 months ago
- Red-team your RAG pipeline for prompt injection, source-document leakage, and cross-document smuggling, in CI. The gap between RAG eval (…☆30Updated this week
- ☆12Jan 5, 2021Updated 5 years ago
- A Dissect module implementing parsers for various hypervisor disk, backup and configuration files.☆12Jul 28, 2026Updated 3 months ago
- command control framework☆38Oct 28, 2026Updated last week
- Experimental Qwen3-0.6B forward computation inside Linux eBPF☆15Oct 28, 2026Updated last week
- This is the list of all rootkits found so far on github and other sites.☆14Aug 29, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Repository behind artefacts.help☆14Oct 26, 2026Updated last week
- Detect V8 JavaScript engine exploitation artifacts in memory.☆17Feb 1, 2026Updated 9 months ago
- a CLI tool for generating logs and metrics from eBPF telemetry, producing flamegraphs and actionable observability outputs☆16Mar 28, 2025Updated last year
- A collection of bypasses and exploits for eBPF-based cloud security.☆32Jan 12, 2024Updated 2 years ago
- Rust implementation, creating a scheduled task programmatically with user logon trigger.☆47Jun 10, 2025Updated last year
- r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems☆11Aug 6, 2018Updated 8 years ago
- DUQU MALWARE SOURCE + BINARY + More coming☆14Feb 6, 2023Updated 3 years ago
- LOJAX ROOTKIT (UEFI) +PDF Included[x]☆39Mar 9, 2023Updated 3 years ago
- A read-only web UI for browsing eBPF maps and programs. Run it on a single Linux host, or deploy it to Kubernetes to browse every node fr…☆13Oct 18, 2026Updated 2 weeks ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Configs, Proxys (1 day Update)☆10Jul 28, 2026Updated 3 months ago
- About Us☆20Mar 30, 2024Updated 2 years ago
- A dynamic HTTP/S stager that lets one shellcode loader be reused for different encrypted payloads - no rebuilds.☆20Oct 1, 2025Updated last year
- Open Source Implementation of Cobalt Strike's Malleable C2☆111Jun 27, 2026Updated 4 months ago
- ☆11Apr 17, 2017Updated 9 years ago
- A simple DLL injection protection driver.☆12Dec 21, 2020Updated 5 years ago
- Abertay CMP202 Project☆37May 7, 2021Updated 5 years ago
- Sysprep Volatile Environment LPE (2017)☆15Jun 28, 2025Updated last year
- Beacon Object File (BOF) for dumping certificates (and, when possible, private keys) on Windows☆13Jun 2, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Claude Code status line with a reactive character plus cost, git, and usage widgets. Zero token spend, local-first, MIT.☆31Oct 8, 2026Updated 3 weeks ago
- Translate and Transcribe videos using AWS☆11Oct 21, 2024Updated 2 years ago
- Research on Commercial Space Projects☆19Oct 29, 2020Updated 6 years ago
- Credential Scanner for Popular Desktop AI Platforms☆17Jun 25, 2026Updated 4 months ago
- ☆20Aug 18, 2026Updated 2 months ago
- Agent Skills official site☆35Aug 27, 2026Updated 2 months ago
- Files that dictate the tauOS OSTree - Archived in-place☆11Jun 28, 2023Updated 3 years ago