MatheuZSecurity / detect-lkm-rootkit-cheatsheetLinks
Cheat sheet to detect and remove linux kernel rootkit
☆60Updated 5 months ago
Alternatives and similar repositories for detect-lkm-rootkit-cheatsheet
Users that are interested in detect-lkm-rootkit-cheatsheet are comparing it to the libraries listed below
Sorting:
- Lena's scripts/code/resources for malware analysis☆26Updated 11 months ago
- Collection of codes focused on Linux rootkits☆110Updated 3 months ago
- Make an Linux Kernel rootkit visible again.☆52Updated 3 months ago
- ☆37Updated 5 months ago
- ☆37Updated last year
- NullSection is an Anti-Reversing tool that applies a technique that overwrites the section header with nullbytes.☆65Updated last year
- A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue☆98Updated last year
- GoResolver is a Go analysis tool using both Go symbol extraction and Control Flow Graph (CFG) similarity to identify and resolve the func…☆62Updated last month
- BSides Prishtina 2024 Malware Development and Persistence workshop☆81Updated this week
- POC of GITHUB simple C2 in rust☆53Updated 4 months ago
- Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.☆17Updated 5 months ago
- Aplos an extremely simple fuzzer for Windows binaries.☆69Updated 3 months ago
- ☆59Updated last year
- This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.☆79Updated 9 months ago
- Malware Analysis tools☆26Updated 8 months ago
- Persist like a Dodder☆60Updated 2 weeks ago
- ☆18Updated last week
- Scanning tool for identifying local privilege escalation issues in vulnerable MSI installers☆121Updated 8 months ago
- ☆39Updated last year
- CVE-2024-30090 - LPE PoC☆107Updated 7 months ago
- Analyse MSI files for vulnerabilities☆131Updated 9 months ago
- ☆80Updated 6 months ago
- Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …☆103Updated 2 months ago
- Windows Administrator level Implant.☆49Updated 8 months ago
- Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …☆36Updated 3 months ago
- Powershell Linter☆53Updated last month
- ☆20Updated last year
- OffensiveCon 2024 Repo, contains PoCs and materials for talk "UEFI and the Task of the Translator"☆42Updated last year
- Yara Rules for Modern Malware☆77Updated last year
- Monarch - The Adversary Emulation Toolkit☆62Updated 4 months ago