A collection of Linux kernel rootkits found across the internet taken and put together
☆108Aug 31, 2022Updated 4 years ago
Alternatives and similar repositories for linux-rootkits
Users that are interested in linux-rootkits are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Automate generation of syzkaller's grammar☆16Nov 1, 2022Updated 4 years ago
- ☆17Apr 13, 2026Updated 6 months ago
- Matryoshka - stacked LKM loader☆56Oct 8, 2023Updated 3 years ago
- The Grum Spam Bot☆19Feb 25, 2015Updated 11 years ago
- Linux kernel module that provides remote backdoor using netfilters , file and pid hiding.☆11Apr 1, 2017Updated 9 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Пример руткита для ядра линукс 5☆18Dec 4, 2020Updated 5 years ago
- Linux Kernel Hacking☆776Apr 10, 2024Updated 2 years ago
- awesome-linux-rootkits☆2,113Feb 15, 2026Updated 8 months ago
- A framework for capturing user credentials and sensitive device information.☆69May 22, 2023Updated 3 years ago
- Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go bin…☆34Updated this week
- ELF shared libraries injection to a remote process.☆17Oct 1, 2022Updated 4 years ago
- Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypa…☆272Dec 6, 2025Updated 11 months ago
- An LKM-based Linux kernel security research prototype for studying rootkit behavior and defensive detection techniques.☆120Feb 23, 2024Updated 2 years ago
- Linux Kernel hooking engine (x86)☆393Oct 14, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Regexplore is a Volatility plugin designed to mimic the functionality of the Registry Explorer plugins in EZsuite☆18Mar 31, 2023Updated 3 years ago
- fork from http://icmpshell.sourceforge.net☆15Nov 26, 2015Updated 10 years ago
- This repository holds all the code I have writen for my course CSE381 : Computer organization and architecture☆13Nov 20, 2018Updated 7 years ago
- RiVer Core is an open source Python based RISC-V Core Verification framework.☆23Jun 16, 2025Updated last year
- Offensive Assembly code snippets.☆15Jul 12, 2023Updated 3 years ago
- A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malwar…☆138Sep 19, 2021Updated 5 years ago
- A stealth-focused kernel-mode virtual HID mouse driver for Windows. Built with KMDF and VHF for precise, hardware-level input simulation …☆49Jul 27, 2026Updated 3 months ago
- A tool that acts as an assistant for Reverse Engineering challenges in CTFs☆16Jan 5, 2021Updated 5 years ago
- version 0.5.8☆18Jul 13, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- The LKM rootkit working in Linux Kernels 2.6.x/3.x/4.x/5.x☆139Aug 8, 2023Updated 3 years ago
- kprochide is an LKM for hiding processes from the userland. The module is able to hide multiple processes and is able to dynamically rece…☆24Oct 9, 2020Updated 6 years ago
- CreateRemoteThread for Linux☆48Dec 16, 2019Updated 6 years ago
- Universal Linux LKM rootkit, designed to work in any kernel version and both architectures (i686 and x86_64).☆54Jan 15, 2024Updated 2 years ago
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆17Jul 27, 2026Updated 3 months ago
- A Beacon Object File (BOF) for Cobalt Strike and Mythic C2 that implements COM hijacking for persistence on Windows systems.☆38Feb 17, 2026Updated 8 months ago
- MCP-powered reverse engineering platform connecting WinDbg, IDA Pro & x64dbg with 160+ AI-accessible debugging and analysis tools.☆31Sep 23, 2026Updated last month
- Proof-of-Concept software for detecting AV/EDR hooks in Windows libraries.☆40May 12, 2022Updated 4 years ago
- Rootkit spotter - experimental Linux rootkit finder LKM☆31Oct 11, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Process Impairment Exploit Chain.☆36Aug 12, 2026Updated 2 months ago
- Azazel is a userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit. It is more robust and has additional feat…☆810Mar 7, 2024Updated 2 years ago
- ELF Infector's Toolkit☆66May 26, 2016Updated 10 years ago
- Simple LKM linux kernel rootkit (x86 / x86_64)☆24Jun 16, 2020Updated 6 years ago
- Academic project of Linux rootkit made for Bachelor Engineering Thesis.☆122Mar 27, 2026Updated 7 months ago
- This Repository aims at giving a basic idea about Kernel Exploitation.☆530Jun 28, 2024Updated 2 years ago
- ☆11Aug 1, 2024Updated 2 years ago