KernelGhost is a next-generation offensive security framework that combines stealthy eBPF-based rootkit capabilities with advanced hypervisor escape techniques. It enables persistent cross-VM access, stealth process hiding, UEFI firmware backdoors, and more all while evading modern detection systems.
☆31Apr 2, 2025Updated last year
Alternatives and similar repositories for kernelghost
Users that are interested in kernelghost are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Code-snippets for developing eBPF programs☆22Oct 6, 2025Updated 9 months ago
- eBPF container escape detector prototype | Kernel 6.8+ | Early dev phase | Expect kernel panics ⚠️☆16Apr 27, 2026Updated 2 months ago
- [+] nls_933w.dll + [+] WIN32M.SYS MALWARE- ONLY FOR ACADEMICAL RESEARCH PURPOSES!☆14Sep 20, 2025Updated 10 months ago
- An eBPF skill for coding agents☆42Apr 12, 2026Updated 3 months ago
- Collection of various malware techniques aimed at Windows through MinGW☆16Aug 24, 2024Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Detection of rootkit file hiding activities through analysis of shifts in kernel function execution times.☆29Sep 10, 2025Updated 10 months ago
- Tool that gets you root from just an ip☆13Nov 30, 2023Updated 2 years ago
- XOrCryptEx lightweight C Utility/Algorithm☆13Mar 3, 2022Updated 4 years ago
- Detect V8 JavaScript engine exploitation artifacts in memory.☆15Feb 1, 2026Updated 5 months ago
- 4/5 of the leaks provided by TheShadowBrokers containing content from The Equation Group.☆15Jul 11, 2017Updated 9 years ago
- DNS filtering with eBPF☆19Nov 6, 2025Updated 8 months ago
- a CLI tool for generating logs and metrics from eBPF telemetry, producing flamegraphs and actionable observability outputs☆16Mar 28, 2025Updated last year
- This script reads a text file containing domains, fetches the subdomains from crt.sh☆11May 31, 2023Updated 3 years ago
- Display Languages Volatile Environment LPE☆12Jun 28, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- fyyre.l2-fashion.de .. old site☆17Apr 27, 2022Updated 4 years ago
- Modern container runtime for Linux and macOS. Implements Solaris-style "Zones" using eBPF LSM and native Apple Silicon virtualization. Wr…☆28Jun 26, 2026Updated 3 weeks ago
- ☆12Jan 5, 2021Updated 5 years ago
- an iSCSI demo driver for Windows☆12Sep 21, 2015Updated 10 years ago
- Website vuln example.☆11Apr 10, 2026Updated 3 months ago
- ☆12Nov 17, 2020Updated 5 years ago
- Rust implementation, creating a scheduled task programmatically with user logon trigger.☆47Jun 10, 2025Updated last year
- A dynamic HTTP/S stager that lets one shellcode loader be reused for different encrypted payloads - no rebuilds.☆20Oct 1, 2025Updated 9 months ago
- lightmon is a lightweight, Docker/K8s container-aware network traffic monitoring tool based on eBPF technology.☆16May 15, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- vxlan protocol / unknown unicast flooding technique + eBPF☆25Jul 4, 2026Updated 2 weeks ago
- DNS Dashboard for hunting and identifying beaconing☆17Jul 29, 2020Updated 5 years ago
- Measure UDP and TCP connection latency for IPv4 and IPv6 using eBPF and Go☆76Updated this week
- A simple DLL injection protection driver.☆12Dec 21, 2020Updated 5 years ago
- This project is a server-side solution for seamless URL redirection when a QR code is scanned. It redirects users to a specified URL and …☆16Aug 18, 2024Updated last year
- Threat Hunt Investigation Methodology and Procedure☆15Jul 11, 2022Updated 4 years ago
- ☆17Feb 23, 2026Updated 4 months ago
- A tool to showcase the Therac-25 bugs☆12Jun 11, 2019Updated 7 years ago
- Cobalt Strike BOF to freeze EDR/AV processes and dump LSASS using WerFaultSecure.exe PPL bypass☆144Jan 29, 2026Updated 5 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- coreless esp32 controlled drone☆11Mar 17, 2023Updated 3 years ago
- Research on Commercial Space Projects☆18Oct 29, 2020Updated 5 years ago
- Time series forecasting and analytics, powered by machine learning☆11Mar 25, 2025Updated last year
- ☆16Jan 30, 2025Updated last year
- Remote Assistance Volatile Environment LPE☆15Jun 28, 2025Updated last year
- 2022 Updated Kernelmode-Code☆32Mar 23, 2024Updated 2 years ago
- A LKM (Loadable Kernel Module) to execute a command as root; I include a example of using netcat and a compiled(with source and steps on…☆17Oct 8, 2024Updated last year