Cheat sheet to detect and remove linux kernel rootkit
☆82Dec 16, 2024Updated last year
Alternatives and similar repositories for detect-lkm-rootkit-cheatsheet
Users that are interested in detect-lkm-rootkit-cheatsheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Collection of codes focused on Linux rootkits☆228Oct 22, 2025Updated last year
- Make an Linux Kernel rootkit visible again.☆59Feb 27, 2025Updated last year
- Persistent Reverse Shell with Kernel Thread Monitoring and Uninterruptible Sleep☆13Sep 19, 2024Updated 2 years ago
- yet another hidden LKM hunter☆32Sep 18, 2025Updated last year
- This is a simple process injection made in C for Linux systems☆30Sep 23, 2023Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ModTracer Finds Hidden Linux Kernel Rootkits and then make visible again.☆88Feb 28, 2025Updated last year
- ☆23Mar 22, 2025Updated last year
- 「⚔️」Ring 0 Rootkit for Linux Kernels x86/x86_64 5.x/6.x☆27Apr 10, 2025Updated last year
- ☆16May 3, 2024Updated 2 years ago
- Attacking the cleanup_module function of a kernel module☆57Jun 30, 2025Updated last year
- A simple Linux in-memory .so loader☆35Mar 29, 2023Updated 3 years ago
- A ring0 Loadable Kernel Module (Linux) for latest kernels 6.x☆108Dec 16, 2025Updated 10 months ago
- A Linux kernel rootkit in Rust using a custom made type-2 hypervisor, eBPF XDP and TC programs☆340Feb 27, 2026Updated 8 months ago
- A ring0 Loadable Kernel Module (Linux) to log all commnds run on the system.☆18Jul 13, 2026Updated 3 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- An analysis of intels goldmont plus uarch predecode caches core logic due to it being undocumented☆19Jul 12, 2025Updated last year
- Linux kernel integrity monitor for detecting syscall hooking☆97Feb 16, 2026Updated 8 months ago
- ☆15Dec 24, 2023Updated 2 years ago
- Simple CLI utility to save off an image from every webcam hooked into a mac☆14May 20, 2021Updated 5 years ago
- LD_PRELOAD rootkit☆11Jan 26, 2022Updated 4 years ago
- A Linux kernel module which hides itself☆53Sep 1, 2021Updated 5 years ago
- fuxSocy is a linux rootkit made in c and works via system hooking (ftrace)☆12Oct 27, 2025Updated last year
- Runbook to find threats & track your hunts☆12May 5, 2025Updated last year
- Weaponizing the Linux Kernel (Hide Files/PID, SSH backdoors, SSL Sniffer, ...) by poking around eBPF/XDP☆89Sep 3, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Demonized Shell is an Advanced Tool for persistence in linux.☆461Jan 5, 2025Updated last year
- A modification to fortra's CVE-2023-28252 exploit, compiled to exe☆57Jan 24, 2024Updated 2 years ago
- Linux #rootkit and #malware revealer☆31Aug 1, 2024Updated 2 years ago
- Sock Spy is a tool for educational use in OSINT and cybersecurity. It allows simulation of realistic fake profiles for awareness, trainin…☆15Apr 25, 2025Updated last year
- List UEFI Configuration Tables☆16May 23, 2024Updated 2 years ago
- ☆13Aug 4, 2023Updated 3 years ago
- A repository to store community malware research notes and findings.☆17Updated this week
- A Swiss Army knife for offensive security with its own blades.☆18May 18, 2025Updated last year
- A synergized Visual Studio and Rust development environment☆18Jan 25, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆16Oct 18, 2026Updated 2 weeks ago
- Red-Team LKM☆663Oct 18, 2026Updated 2 weeks ago
- PoC multi-layer protector for ELF32 x86 binaries☆12Feb 26, 2022Updated 4 years ago
- Create malware knowledge graphs from analysis reports☆42Dec 6, 2023Updated 2 years ago
- Stealthy Linux Kernel Rootkit☆1,831Oct 6, 2026Updated last month
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆66Apr 13, 2025Updated last year
- Windows rootkit designed to work with BYOVD exploits☆227Jan 18, 2025Updated last year