A collection of Linux kernel rootkits found across the internet taken and put together
☆109Aug 31, 2022Updated 4 years ago
Alternatives and similar repositories for linux-rootkits
Users that are interested in linux-rootkits are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Automate generation of syzkaller's grammar☆16Nov 1, 2022Updated 3 years ago
- ☆17Apr 13, 2026Updated 6 months ago
- Linux Kernel Hacking☆776Apr 10, 2024Updated 2 years ago
- Linux kernel module that provides remote backdoor using netfilters , file and pid hiding.☆11Apr 1, 2017Updated 9 years ago
- Offensive PoC tool for BTR.sys - Microsoft Defender's Boot Time Removal Tool. Supporting material for the BTR Reforged research (Black Ha…☆146Aug 20, 2026Updated last month
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A framework for capturing user credentials and sensitive device information.☆69May 22, 2023Updated 3 years ago
- Пример руткита для ядра линукс 5☆18Dec 4, 2020Updated 5 years ago
- The Grum Spam Bot☆19Feb 25, 2015Updated 11 years ago
- awesome-linux-rootkits☆2,109Feb 15, 2026Updated 8 months ago
- This repository holds all the code I have writen for my course CSE381 : Computer organization and architecture☆13Nov 20, 2018Updated 7 years ago
- Fileless ELF execution☆84Sep 12, 2026Updated last month
- Rootkit☆24Nov 15, 2014Updated 11 years ago
- Universal Linux LKM rootkit, designed to work in any kernel version and both architectures (i686 and x86_64).☆54Jan 15, 2024Updated 2 years ago
- ELF shared libraries injection to a remote process.☆17Oct 1, 2022Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- JioFiDash - A simple dashboard to view battery status, data usage, data speeds and connected devices.☆15Nov 25, 2018Updated 7 years ago
- Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-writ…☆108Aug 16, 2026Updated 2 months ago
- An LKM rootkit targeting Linux 2.6/3.x on x86(_64), and ARM☆689Nov 21, 2017Updated 8 years ago
- Technical documentation, reverse engineering research, and tools for the Windows Endpoint Security Platform (WESP).☆81Sep 18, 2026Updated 3 weeks ago
- LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)☆2,477Apr 27, 2026Updated 5 months ago
- kprochide is an LKM for hiding processes from the userland. The module is able to hide multiple processes and is able to dynamically rece…☆24Oct 9, 2020Updated 6 years ago
- version 0.5.8☆18Jul 13, 2021Updated 5 years ago
- Matryoshka - stacked LKM loader☆56Oct 8, 2023Updated 3 years ago
- Six-layer call-stack spoofing via .pdata lacunae — defeats ETW-Ti, kernel callbacks, CET shadow stack, and return-address validation in…☆198Jun 25, 2026Updated 3 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A tool that acts as an assistant for Reverse Engineering challenges in CTFs☆16Jan 5, 2021Updated 5 years ago
- Simple LKM linux kernel rootkit (x86 / x86_64)☆24Jun 16, 2020Updated 6 years ago
- Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypa…☆273Dec 6, 2025Updated 10 months ago
- Repository for understanding and writing LLVM passes.☆35Jul 29, 2019Updated 7 years ago
- Proof-of-Concept software for detecting AV/EDR hooks in Windows libraries.☆38May 12, 2022Updated 4 years ago
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆79Aug 1, 2026Updated 2 months ago
- Academic project of Linux rootkit made for Bachelor Engineering Thesis.☆121Mar 27, 2026Updated 6 months ago
- GoTEE - example application☆17Oct 9, 2026Updated last week
- Kassandra is a custom Mythic C2 agent written in Rust, containerized via a Python-based builder☆24Jul 31, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ELF Infector's Toolkit☆66May 26, 2016Updated 10 years ago
- Rootkit spotter - experimental Linux rootkit finder LKM☆31Oct 11, 2020Updated 6 years ago
- LKM Linux rootkit☆2,743Aug 17, 2026Updated 2 months ago
- A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injecti…☆134Sep 6, 2026Updated last month
- A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.☆1,986Apr 7, 2024Updated 2 years ago
- A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malwar…☆138Sep 19, 2021Updated 5 years ago
- ☆56Jul 11, 2024Updated 2 years ago