A Loadable Kernel Module (LKM) Rootkit that hooks the system call table and hides the chosen process(according to your parameter) from 'ls' and 'ps' commands. The Rootkit hijacks stat and getdents system calls.
☆20Dec 24, 2019Updated 6 years ago
Alternatives and similar repositories for Process-Hiding-Rootkit
Users that are interested in Process-Hiding-Rootkit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Simple Assault cube external hack written in C☆13Apr 26, 2021Updated 5 years ago
- modern implementation of real goto/label statements in python 3.5+.☆13Feb 9, 2021Updated 5 years ago
- My attempt to reverse the Discord nitro token generation function.☆29Sep 28, 2024Updated 2 years ago
- Track your beacons in a redteam scoreboard☆15Oct 28, 2020Updated 5 years ago
- A library to de/serialize structured-cloneable data to a Unicode string, optionally with LZ4 compression☆15Aug 1, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A kernel module for tracing signal☆32Jan 17, 2023Updated 3 years ago
- A LKM rootkit for most newer kernel versions.☆181Sep 17, 2017Updated 9 years ago
- Tutorials, tools, and more as related to reverse engineering video games.☆32Sep 4, 2018Updated 8 years ago
- 基于Rust和eBPF实现RDMA内核模块、驱动☆20Feb 28, 2022Updated 4 years ago
- a reliable C based exploit and writeup for CVE-2021-3560.☆40Jun 23, 2021Updated 5 years ago
- Tool to get NT system shell .☆11Jun 29, 2021Updated 5 years ago
- Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.☆14Jul 9, 2023Updated 3 years ago
- DDK 内核模块开发模板☆23Oct 31, 2025Updated 11 months ago
- Scan GitHub repositories for potentially infected MSBuild project files☆17May 27, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- The kernel module for avoid rooting detection on android.☆33Aug 27, 2015Updated 11 years ago
- An open source Fraps-like tool for measuring GPU usage of your system and running processes, designed for Windows, macOS, and Linux (comi…☆15Jul 11, 2023Updated 3 years ago
- Tool to dump UEFI runtime drivers implementing runtime services for Windows☆114Dec 24, 2020Updated 5 years ago
- OpenHashAPI provides a secure method of communicating hashes and enables lightweight workflows for security practitioners and enthusiasts…☆13Oct 27, 2024Updated last year
- external hack for Among Us (PATCHED)☆36Aug 8, 2021Updated 5 years ago
- ☆10Aug 29, 2023Updated 3 years ago
- Mass exploitation of CVE-2021-24499 unauthenticated upload leading to remote code execution in Workreap theme.☆16Sep 20, 2021Updated 5 years ago
- An example of a floating ball for Android and PC☆22Nov 1, 2022Updated 3 years ago
- ☆20Sep 8, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 📈 PerfTop: A client for the OpenSearch Performance Analyzer☆17Jun 2, 2026Updated 4 months ago
- [mirror] UPower-powered power alerter (https://sr.ht/~kennylevinsen/poweralertd/)☆18Apr 20, 2024Updated 2 years ago
- LLVM Repository for Android NDK Custom.☆22Oct 2, 2026Updated last week
- ☆19Sep 17, 2025Updated last year
- ☆10Mar 1, 2024Updated 2 years ago
- Fileless ELF execution☆83Sep 12, 2026Updated 3 weeks ago
- ☆12May 24, 2023Updated 3 years ago
- A simple injector that uses LoadLibraryA☆19Jun 14, 2020Updated 6 years ago
- Local Windows credential extraction☆24Jul 14, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- WinGPG is a tray-based classical Windows application, Windows NT Explorer shell extension, and a classic GPGv2 distribution. Secure your …☆12Jul 31, 2021Updated 5 years ago
- Scripts and things.☆15Jan 23, 2026Updated 8 months ago
- Discarded Section Manual Map☆69Jun 18, 2020Updated 6 years ago
- A Python library for parsing the Abstract Syntax Tree (AST) of compiled Solidity files.☆11Dec 1, 2023Updated 2 years ago
- My experience using Windows API for offensive purposes☆17Jul 10, 2021Updated 5 years ago
- A small example of an assembly bootloader☆11Jun 29, 2021Updated 5 years ago
- CVE-2021-3707 , CVE-2021-3708☆21Jan 21, 2022Updated 4 years ago