Attacking the cleanup_module function of a kernel module
☆58Jun 30, 2025Updated last year
Alternatives and similar repositories for UnhookingLinuxEdr
Users that are interested in UnhookingLinuxEdr are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ElfDoor-gcc is an LD_PRELOAD that hijacks gcc to inject malicious code into binaries during linking, without touching the source code.☆137Apr 13, 2025Updated last year
- 「⚔️」Ring 0 Rootkit for Linux Kernels x86/x86_64 5.x/6.x☆27Apr 10, 2025Updated last year
- Collection of codes focused on Linux rootkits☆227Oct 22, 2025Updated last year
- Linux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls.☆391Aug 29, 2025Updated last year
- yet another hidden LKM hunter☆32Sep 18, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Make an Linux Kernel rootkit visible again.☆59Feb 27, 2025Updated last year
- The home to the popular script named Voidware☆18Feb 10, 2025Updated last year
- RunPE implementation with multiple evasive techniques (2)☆14Sep 25, 2025Updated last year
- ModTracer Finds Hidden Linux Kernel Rootkits and then make visible again.☆88Feb 28, 2025Updated last year
- ☆55May 31, 2025Updated last year
- I/O Cache-As-Ram + AMD x86_64 cache line locking | Mirror of https://codeberg.org/3itch/icekit☆19Mar 10, 2025Updated last year
- A BOF designed to inspect processes memory and addresses☆42Apr 19, 2026Updated 6 months ago
- Linux kernel integrity monitor for detecting syscall hooking☆97Feb 16, 2026Updated 8 months ago
- Persistent Reverse Shell with Kernel Thread Monitoring and Uninterruptible Sleep☆13Sep 19, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A ring0 Loadable Kernel Module (Linux) to log all commnds run on the system.☆18Jul 13, 2026Updated 3 months ago
- ☆20Jul 5, 2026Updated 3 months ago
- Author of Project Adrishya a rootkit which use ftrace mechanism to hook syscall; (write this because God commanded me); work for both x86…☆36Sep 19, 2025Updated last year
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆217Feb 6, 2025Updated last year
- Reflective x64 Loader written in C/ASM☆15Dec 2, 2025Updated 10 months ago
- A synergized Visual Studio and Rust development environment☆18Jan 25, 2025Updated last year
- A Swiss Army knife for offensive security with its own blades.☆18May 18, 2025Updated last year
- UDC2 implementation that provides an ICMP C2 channel☆132Nov 24, 2025Updated 11 months ago
- Passive backdoor implant that sniffs for a covert magic-packet trigger and runs tasks written in a custom 23-opcode bytecode command lang…☆57Aug 26, 2026Updated 2 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Chess.com unlimited analysis (server side) for free tier!☆36May 25, 2026Updated 5 months ago
- Post-exploitation and evasion research toolkit for Linux.☆293Jul 22, 2026Updated 3 months ago
- Installing wazuh SIEM Unified XDR and SIEM protection☆34Jun 3, 2025Updated last year
- A Linux kernel rootkit in Rust using a custom made type-2 hypervisor, eBPF XDP and TC programs☆341Feb 27, 2026Updated 8 months ago
- Cobalt Strike BOF to obtain location data☆30Jul 4, 2026Updated 3 months ago
- A different approach to writing BOFs in rust.☆21Aug 20, 2025Updated last year
- ☆72Jul 12, 2026Updated 3 months ago
- NullSection is an Anti-Reversing tool that applies a technique that overwrites the section header with nullbytes.☆68Jan 20, 2024Updated 2 years ago
- Stage 0☆170Dec 18, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- early cascade injection PoC based on Outflanks blog post, in rust☆64Nov 8, 2024Updated last year
- Robson is a simple LKM rootkit that uses the Linux kernel's kprobes tracing feature as a hooking mechanism.☆13Feb 16, 2023Updated 3 years ago
- A truly Position Independent Code (PIC) NimPlant C2 beacon written in C, without reflective loading.☆66Feb 11, 2025Updated last year
- ☆20Nov 6, 2023Updated 2 years ago
- find dll base addresses without PEB WALK☆171Jul 13, 2025Updated last year
- A ring0 Loadable Kernel Module (Linux) for latest kernels 6.x☆108Dec 16, 2025Updated 10 months ago
- LD_PRELOAD Rootkit☆342Apr 5, 2025Updated last year