Silverseal is an open-source Linux bootkit and rootkit framework written in Rust, using UEFI and early kernel boot hooks to load a stealthy kernel rootkit.
☆172Oct 8, 2026Updated 3 weeks ago
Alternatives and similar repositories for Silverseal
Users that are interested in Silverseal are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆159Sep 27, 2026Updated last month
- AWS S3 User-Defined C2☆27Oct 6, 2026Updated 3 weeks ago
- A concept of using a ROP chain paired with a WRMSR primitive to call kernel functions and map unsigned drivers through BYOVD (AmdTools64.…☆67Sep 21, 2026Updated last month
- OneDrive as a covert C2 transport for Cobalt Strike☆77Sep 19, 2026Updated last month
- A compiled language for Windows position-independent x86-64 shellcode and Beacon Object Files.☆317Jun 28, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Hidden Desktop Plugin For Havoc C2,Soon coming for Sliver.☆264Sep 29, 2026Updated last month
- Recover NT hashes from NetNTLMv1 responses using local WebGPU computation and local/remote table lookup☆147Oct 7, 2026Updated 3 weeks ago
- ☆24Sep 12, 2026Updated last month
- PIC shellcode agent based on Stardust framework and Crystal Palace☆90Oct 4, 2026Updated 3 weeks ago
- Clean Indirect Syscalls with Syscall Tampering.☆44Updated this week
- Demonstration of the DLL party process injection technique☆98Oct 1, 2026Updated 3 weeks ago
- Sleep Obfuscation in Rust☆289Dec 1, 2025Updated 10 months ago
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆77Oct 10, 2026Updated 2 weeks ago
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆72Jul 12, 2026Updated 3 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Post-exploitation and evasion research toolkit for Linux.☆293Jul 22, 2026Updated 3 months ago
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆19Jan 3, 2026Updated 9 months ago
- Run unsigned kernel payloads in a signed kernel driver via wasm3. No JIT/W^x (HVCI/etc., compliant)☆153Aug 18, 2026Updated 2 months ago
- Malware as a Service Ludus Range☆139Sep 24, 2026Updated last month
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆65Updated this week
- Authenticode signature manipulation toolkit for Red Team operations and security research. Covers signature stealing, metadata cloning, S…☆141Aug 13, 2026Updated 2 months ago
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆162Jul 15, 2026Updated 3 months ago
- Repository for various Beacon Object Files (BOFs)☆172Oct 22, 2026Updated last week
- Cobalt Strike BOF for extracting Firefox passwords and cookies. Decrypts saved credentials using NSS, supports key3.db/key4.db, logins.js…☆42Jul 5, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Autonomous Windows POC developer from patchwatch diff reports☆161Jul 30, 2026Updated 2 months ago
- Set of PoC to abuse Windows minifilters functionality☆111May 1, 2026Updated 5 months ago
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆109Updated this week
- Rusty DoublePulsar - Cobalt Strike User-Defined Reflective Loader (UDRL) in Rust (Codename: DoublePulsar)☆117May 14, 2026Updated 5 months ago
- Hells Hollow Windows 11 Rootkit technique to Hook the SSDT via Alt Syscalls☆294Jul 13, 2026Updated 3 months ago
- A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike☆244Apr 11, 2026Updated 6 months ago
- A Cobalt Strike Beacon Object File that exploits the BlueHammer vulnerability that to obtain a copy of the SAM database.☆166Apr 15, 2026Updated 6 months ago
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆90Aug 1, 2026Updated 2 months ago
- ☆16Jan 15, 2026Updated 9 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A listener profile for the Mythic C2 framework that utilizes AI vendors file API's☆31Oct 2, 2026Updated 3 weeks ago
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆38Oct 14, 2026Updated 2 weeks ago
- A collection of techniques for process injection on Windows☆105Aug 16, 2026Updated 2 months ago
- A stealthy process injection PoC combining Thread Name-Calling for payload delivery with Waiting Thread Hijacking for execution, with zer…☆111Updated this week
- A stealthy, fully syscalled C/C++ userland anti-debugging library for Windows, designed to protect software from reverse engineering☆348Sep 21, 2026Updated last month
- Collection of reversed vulnerable drivers weaponized into process killers. PPL won't save you.☆111Oct 18, 2026Updated last week
- Sample Rust crate used to implement a VBS enclave in Rust☆50Jun 3, 2025Updated last year