A curated compilation of extensive resources dedicated to bootkit and rootkit development.
☆288Aug 16, 2026Updated 2 months ago
Alternatives and similar repositories for Awesome-Bootkits-Rootkits-Development
Users that are interested in Awesome-Bootkits-Rootkits-Development are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows Kernel Rootkit☆81Aug 16, 2026Updated 2 months ago
- Automated environment setup for Bootkit & Rootkit development.☆47Aug 16, 2026Updated 2 months ago
- The first publicly shared complete Windows UEFI bootkit framework for automated Ring0 rootkit deployment and APT emulation☆168Aug 16, 2026Updated 2 months ago
- Starter pack for learning how to develop UEFI bootkits: basic proof-of-concepts, development environment configuration, and step-by-step …☆40Jul 31, 2026Updated 2 months ago
- Starter pack for learning how to develop Kernel-Mode rootkits: basic proof-of-concepts, development environment configuration, and step-b…☆28Jul 31, 2026Updated 2 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Use PKfail to install UEFI Bootkits☆24Aug 16, 2026Updated 2 months ago
- [ARCHIVED] Early work on Benthic (Windows Kernel Rootkit).☆58Aug 15, 2025Updated last year
- [ARCHIVED] Early work on Abyss (Windows UEFI Bootkit).☆42Aug 15, 2025Updated last year
- Attacking the cleanup_module function of a kernel module☆58Jun 30, 2025Updated last year
- PIC shellcode (C/C++) development toolkit designed for malware developers.☆136Dec 23, 2025Updated 10 months ago
- A talk about finding your own path to vulnerability research and your first CVE.☆16Apr 4, 2026Updated 6 months ago
- Dynamic shellcode loader with sophisticated evasion capabilities☆344Oct 1, 2025Updated last year
- Stealthy Linux Kernel Rootkit☆1,826Oct 6, 2026Updated 2 weeks ago
- Linux Sleep Obfuscation☆129Jan 7, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.☆612Aug 2, 2025Updated last year
- Silverseal is an open-source Linux bootkit and rootkit framework written in Rust, using UEFI and early kernel boot hooks to load a stealt…☆171Oct 8, 2026Updated 2 weeks ago
- Metamorphic cross-compilation of C++ & C-code to PIC, BOF & EXE.☆648Feb 2, 2026Updated 8 months ago
- A Cobalt Strike payload generator and lateral movement aggressor script which places Beacon shellcode into a custom shellcode loader☆44Sep 25, 2024Updated 2 years ago
- Cobalt Strike Beacon Object File to to change the user's desktop wallpaper☆18Sep 15, 2023Updated 3 years ago
- Evasion kit for Cobalt Strike☆509Jun 5, 2026Updated 4 months ago
- A small set of Beacon Object Files (BOFs) that I developed over the time with a Magic: The Gathering theme.☆22Jul 15, 2025Updated last year
- Automatically scan the file system to identify Electron applications vulnerable to ASAR tampering.☆164Nov 28, 2025Updated 10 months ago
- BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE…☆987Aug 18, 2026Updated 2 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR …☆311Jul 31, 2024Updated 2 years ago
- Windows rootkit designed to work with BYOVD exploits☆226Jan 18, 2025Updated last year
- Dump protected process memory by using BYOVD to tamper with handle objects in the kernel.☆48Aug 5, 2025Updated last year
- Surgical UNWIND_INFO preservation for sleep masking without call stack spoofing.☆56Mar 30, 2026Updated 6 months ago
- AV/EDR Lab environment setup references to help in Malware development☆475Feb 19, 2025Updated last year
- Bring your own Unwind Data Framework☆180Mar 15, 2026Updated 7 months ago
- A Beacon Object File (BOF) for Havoc/CS to Bypass PPL and Dump Lsass☆179Sep 22, 2025Updated last year
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆314Sep 18, 2024Updated 2 years ago
- Open Source Implementation of Cobalt Strike's Malleable C2☆109Jun 27, 2026Updated 3 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Implementing Ghostly-Hollowing using tampered syscalls for remote PE injection☆76Dec 26, 2025Updated 9 months ago
- Intel 64/Windows low-level experiments☆118Sep 16, 2026Updated last month
- Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths☆366Aug 11, 2024Updated 2 years ago
- A COFF Loader written in Rust☆144Oct 11, 2026Updated 2 weeks ago
- A Swiss Army knife for offensive security with its own blades.☆18May 18, 2025Updated last year
- An NTP channel for Beacons, implemented using Cobalt Strike’s External C2 framework.☆35Oct 6, 2025Updated last year
- SMM driver/rootkit for platform memory access with R3 <-> R0 <-> R-2 communication.☆128Oct 15, 2024Updated 2 years ago