KernelGhost is a next-generation offensive security framework that combines stealthy eBPF-based rootkit capabilities with advanced hypervisor escape techniques. It enables persistent cross-VM access, stealth process hiding, UEFI firmware backdoors, and more all while evading modern detection systems.
☆32Apr 2, 2025Updated last year
Alternatives and similar repositories for kernelghost
Users that are interested in kernelghost are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- eBPF-based tool can trace GPU memory leaks by processes in Linux.☆15Sep 26, 2025Updated 10 months ago
- eBPF container escape detector prototype | Kernel 6.8+ | Early dev phase | Expect kernel panics ⚠️☆16Apr 27, 2026Updated 3 months ago
- An eBPF skill for coding agents☆42Apr 12, 2026Updated 3 months ago
- ☆21Oct 3, 2025Updated 10 months ago
- Executes at the silicon boundary☆29Jul 16, 2026Updated 3 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 4/5 of the leaks provided by TheShadowBrokers containing content from The Equation Group.☆15Jul 11, 2017Updated 9 years ago
- command control framework☆34Updated this week
- Incident Response Collections☆11Jul 24, 2018Updated 8 years ago
- DUQU MALWARE SOURCE + BINARY + More coming☆14Feb 6, 2023Updated 3 years ago
- Zerokit shared code☆18Mar 28, 2019Updated 7 years ago
- Display Languages Volatile Environment LPE☆12Jun 28, 2025Updated last year
- Modern container runtime for Linux and macOS. Implements Solaris-style "Zones" using eBPF LSM and native Apple Silicon virtualization. Wr…☆28Jul 21, 2026Updated 2 weeks ago
- an iSCSI demo driver for Windows☆12Sep 21, 2015Updated 10 years ago
- Open Source Implementation of Cobalt Strike's Malleable C2☆106Jun 27, 2026Updated last month
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A dynamic HTTP/S stager that lets one shellcode loader be reused for different encrypted payloads - no rebuilds.☆20Oct 1, 2025Updated 10 months ago
- Rust implementation, creating a scheduled task programmatically with user logon trigger.☆47Jun 10, 2025Updated last year
- Malware WinXPSP2.Cermalus Windows Kernel Virus☆14Aug 11, 2023Updated 3 years ago
- vxlan protocol / unknown unicast flooding technique + eBPF☆25Jul 4, 2026Updated last month
- Measure UDP and TCP connection latency for IPv4 and IPv6 using eBPF and Go☆76Aug 3, 2026Updated last week
- A simple DLL injection protection driver.☆12Dec 21, 2020Updated 5 years ago
- ☆17Feb 23, 2026Updated 5 months ago
- Cobalt Strike BOF to freeze EDR/AV processes and dump LSASS using WerFaultSecure.exe PPL bypass☆144Jan 29, 2026Updated 6 months ago
- A backstage extension for Quarkus☆17Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Translate and Transcribe videos using AWS☆12Oct 21, 2024Updated last year
- Time series forecasting and analytics, powered by machine learning☆11Mar 25, 2025Updated last year
- ☆12Apr 15, 2022Updated 4 years ago
- Remote Assistance Volatile Environment LPE☆15Jun 28, 2025Updated last year
- ☆16Jan 30, 2025Updated last year
- A LKM (Loadable Kernel Module) to execute a command as root; I include a example of using netcat and a compiled(with source and steps on…☆17Oct 8, 2024Updated last year
- Files that dictate the tauOS OSTree - Archived in-place☆11Jun 28, 2023Updated 3 years ago
- Contains Actual Events and Codes of Threat Groups, APTs, Research Groups☆20Sep 10, 2022Updated 3 years ago
- SPiCa (System Process Integrity & Cross-view Analysis) is a high-performance, eBPF-based rootkit detection engine written in Rust, inspir…☆104Jul 14, 2026Updated 3 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- notepad++堆缓冲区溢出漏洞CVE-2023-40031 分析与复现☆15Sep 8, 2023Updated 2 years ago
- Telegram base free Rat☆16Apr 26, 2025Updated last year
- Core Aranya tech including policy compiler, parser, interface generator, VM, DAG☆17Updated this week
- A structured, continuously updated threat-intelligence repository focused on ransomware families and threat actors.☆45Updated this week
- A lightweight, extensible forensic tool that leverages eBPF to collect real-time system events on Windows for Digital Forensics and Incid…☆20Aug 26, 2025Updated 11 months ago
- Strong Chess Engine in C++☆10Jul 23, 2026Updated 2 weeks ago
- Helping people get healthier through organic nutrition☆12Jul 10, 2024Updated 2 years ago