Alternatives and similar repositories for linux-rootkits

Users that are interested in linux-rootkits are comparing it to the libraries listed below

• h3xduck / Umbra
  A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malwar…
  ☆126Updated 3 years ago
• milabs / kopycat
  Linux Kernel module-less implant (backdoor)
  ☆72Updated 4 years ago
• elfmaster / linker_preloading_virus
  An example of hijacking the dynamic linker with a custom interpreter who loads and executes modular viruses
  ☆64Updated 3 years ago
• W3ndige / linux-process-injection
  Proof of concept for injecting simple shellcode via ptrace into a running process.
  ☆69Updated 2 years ago
• Error996 / bdvl
  bdvl
  ☆113Updated 3 years ago
• VoidSec / Exploit-Development
  Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)
  ☆222Updated last year
• milabs / kmatryoshka
  Matryoshka - stacked LKM loader
  ☆52Updated last year
• d3npa / freebsd-rootkits
  Exercises from Designing BSD Rootkits working in 2020 with FreeBSD 12.2
  ☆47Updated 2 years ago
• IridiumXOR / uclibc-sig
  IDA SIG files for multiarch uClibc library
  ☆37Updated 6 years ago
• Notselwyn / netkit
  Linux rootkit for educational purposes
  ☆31Updated last year
• therealdreg / nasm_linux_x86_64_pure_sharedlib
  NASM Linux x86_64 pure (no deps) shared library (.so), POC for Reflective ELF SO injection
  ☆29Updated last year
• chompie1337 / Linux_LPE_io_uring_CVE-2021-41073
  ☆100Updated 3 years ago
• reveng007 / reveng_rtkit
  Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypa…
  ☆250Updated last year
• cve-north-stars / cve-north-stars.github.io
  Leveraging CVEs as North Stars in vulnerability discovery and comprehension.
  ☆64Updated last year
• lcashdol / UPX
  A utility to fix intentionally corrupted UPX packed files.
  ☆85Updated last year
• 0vercl0k / CVE-2021-32537
  PoC for CVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel.
  ☆57Updated 3 years ago
• En14c / LilyOfTheValley
  Simple LKM linux kernel rootkit (x86 / x86_64)
  ☆23Updated 4 years ago
• waleedassar / RestrictedKernelLeaks
  ☆159Updated 3 years ago
• connormcgarr / Kernel-Exploits
  Kernel Exploits
  ☆252Updated 3 years ago
• d4em0n / exrop
  Automatic ROPChain Generation
  ☆285Updated 5 years ago
• 0vercl0k / pwn2own2023-miami
  Writeups, PoCs of the bugs I found while preparing for the Pwn2Own Miami 2023 contest targeting UaGateway from the OPC UA Server category…
  ☆60Updated last year
• Sentinel-One / peafl64
  Static Binary Instrumentation tool for Windows x64 executables
  ☆201Updated last week
• milabs / kjector
  Code injection from Linux kernel to a process
  ☆21Updated last year
• jermeyyy / rooty
  Academic project of Linux rootkit made for Bachelor Engineering Thesis.
  ☆103Updated 9 months ago
• ksen-lin / nitara2
  yet another hidden LKM hunter
  ☆22Updated last year
• vp777 / Windows-Non-Paged-Pool-Overflow-Exploitation
  Techniques based on named pipes for pool overflow exploitation targeting the most recent (and oldest) Windows versions demonstrated on CV…
  ☆227Updated 2 years ago
• h0mbre / Windows-Exploits
  ☆91Updated 4 years ago
• msuiche / smbaloo
  ☆48Updated 4 years ago
• RITRedteam / goofkit
  In line function hooking LKM rootkit
  ☆51Updated 5 years ago
• hardik05 / Conferences
  My conference presentations and Materials for them.
  ☆32Updated 2 years ago