Windows Kernel Rootkit
☆82Aug 16, 2026Updated 2 months ago
Alternatives and similar repositories for Benthic
Users that are interested in Benthic are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The first publicly shared complete Windows UEFI bootkit framework for automated Ring0 rootkit deployment and APT emulation☆171Aug 16, 2026Updated 2 months ago
- Use PKfail to install UEFI Bootkits☆24Aug 16, 2026Updated 2 months ago
- Automated environment setup for Bootkit & Rootkit development.☆48Aug 16, 2026Updated 2 months ago
- A curated compilation of extensive resources dedicated to bootkit and rootkit development.☆289Aug 16, 2026Updated 2 months ago
- Starter pack for learning how to develop Kernel-Mode rootkits: basic proof-of-concepts, development environment configuration, and step-b…☆28Jul 31, 2026Updated 3 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Starter pack for learning how to develop UEFI bootkits: basic proof-of-concepts, development environment configuration, and step-by-step …☆42Jul 31, 2026Updated 3 months ago
- Minimalistic HTTP(S) client for the NT kernel☆61Dec 1, 2025Updated 11 months ago
- Prime a process for injection when S1 is present☆13Feb 8, 2025Updated last year
- Windows rootkit designed to work with BYOVD exploits☆227Jan 18, 2025Updated last year
- EQGRP: Replicating DarkPulsar, an DLL capable of hooking Security Package Method Tables on the Heap!☆15Oct 11, 2020Updated 6 years ago
- open source port/reimplementation of the Cobalt Strike BOF Loader as is☆74Oct 5, 2026Updated last month
- Crystal Palace library for proxying Nt API calls via the Threadpool. Updated for call gadgets.☆23Nov 11, 2025Updated 11 months ago
- dcsync bof☆54Feb 13, 2026Updated 8 months ago
- Header-only compile-time string obfuscation for C++, hiding literals from static analysis and reacting to debuggers at runtime.☆15Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Windows 11 24H2-25H2 Runtime PatchGuard Bypass☆276Nov 4, 2025Updated last year
- Solemn is a lightweight command-line tool for Windows that automates adding drivers to the HVCI (HvciDisallowedImages) custom blocklist☆25May 2, 2026Updated 6 months ago
- ROP gadget-based sleep obfuscation technique☆14Aug 10, 2025Updated last year
- [ARCHIVED] Early work on Benthic (Windows Kernel Rootkit).☆58Aug 15, 2025Updated last year
- Open Source Implementation of Cobalt Strike's Malleable C2☆111Jun 27, 2026Updated 4 months ago
- header only library for NtLoadDriver/NtUnloadDriver.☆11Sep 8, 2020Updated 6 years ago
- Fast covert timing channel communication for inter-process and inter-processor communication on Windows systems.☆78Mar 24, 2026Updated 7 months ago
- ☆21Feb 13, 2026Updated 8 months ago
- Intel 64/Windows low-level experiments☆119Sep 16, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Stack spoofing Detection for CET processes by comparing shadow and user stacks.☆41May 22, 2026Updated 5 months ago
- COM-based DLL Surrogate Injection☆200Dec 9, 2025Updated 10 months ago
- Moonwalk++: Simple POC Combining StackMoonwalking and Memory Encryption☆240Dec 17, 2025Updated 10 months ago
- Thats it! An Open-Source Windows UEFI Rootkit☆42Jul 19, 2025Updated last year
- Porting of NPPSPY by Grzegorz Tworek to 'man in the middle' the user logon process, and store the user's name and password in an unassumi…☆20Apr 24, 2023Updated 3 years ago
- ☆10May 26, 2026Updated 5 months ago
- Cobalt Strike BOF☆58Dec 10, 2025Updated 10 months ago
- Enumerate Callbacks and all Object Types☆17Jan 9, 2023Updated 3 years ago
- An example reference design for a proposed BOF PE☆251Jan 23, 2026Updated 9 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Windows kernel ROP-only implant exposing R/W primitives☆59Feb 1, 2026Updated 9 months ago
- Indirect Syscall invocation via thread hijacking☆27May 5, 2023Updated 3 years ago
- Rusty DoublePulsar - Cobalt Strike User-Defined Reflective Loader (UDRL) in Rust (Codename: DoublePulsar)☆118May 14, 2026Updated 5 months ago
- Havoc C2 BOF port of the KslD.sys BYOVD technique. Credential extraction from lsass via physical memory — no OpenProcess, no auditable AP…☆149Apr 22, 2026Updated 6 months ago
- Patchless ETW & AMSI bypass POC reverse-engineered from Turla’s Kazuar v3 loader.☆24Jan 14, 2026Updated 9 months ago
- PoC for covert persistence via Windows Push Task Scheduler (WPTaskScheduler) RPC interface — invisible to schtasks, Get-ScheduledTask, an…☆78Jun 15, 2026Updated 4 months ago
- got oriented programming gadget finder☆14May 5, 2024Updated 2 years ago