Academic research rootkit using ftrace-hooking to hide files and processes via magic word or user/group. Tested until Linux 6.11.
☆50Jun 5, 2025Updated last year
Alternatives and similar repositories for caraxes
Users that are interested in caraxes are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Detection of rootkit file hiding activities through analysis of shifts in kernel function execution times.☆29Sep 10, 2025Updated 10 months ago
- Python-based cryptocurrency wallet forensics suite supporting 40+ wallet types on Windows, Linux, and macOS. Features encrypted vault ana…☆29Jun 25, 2026Updated 3 weeks ago
- AttackMate is an attack orchestration tool that executes full attack-chains based on playbooks.☆51Jun 23, 2026Updated 3 weeks ago
- Sensitive information should not be stored in a mailbox or chat history. Share secrets encrypted☆16Jul 13, 2026Updated last week
- Red-Team LKM☆652May 31, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆22Mar 22, 2025Updated last year
- Event Tracing for Windows EDR bypass in Rust (usermode)☆40Jun 9, 2024Updated 2 years ago
- Scripts to generate and analyze the AIT alert data set (AIT-ADS)☆34Jun 17, 2026Updated last month
- Remote Administration Tool made in golang language.☆11Aug 7, 2023Updated 2 years ago
- Linux Loadable Kernel Module Rootkit for Linux Kernel 5.x up to linux kernel 6.8 on x86_64, hides files, hides process, hides bind shell …☆19Feb 15, 2026Updated 5 months ago
- Code for "Pre-training with Contrastive Learning for Unified Log Analytics"☆21Jan 22, 2024Updated 2 years ago
- Near compile-time string obfuscation for Golang☆13Oct 3, 2023Updated 2 years ago
- ☆30May 11, 2025Updated last year
- A toolkit for Light Log Anomaly Detection [ICSE'24]☆23Feb 22, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Unauthenticated RCE Flaw in Rejetto HTTP File Server (CVE-2024-23692)☆16Jun 13, 2024Updated 2 years ago
- Fastly scans open ports on large networks and bruteforce login mechanism of found services☆12Aug 24, 2019Updated 6 years ago
- A curated compilation of extensive resources dedicated to bootkit and rootkit development.☆239Jul 10, 2026Updated last week
- LD_PRELOAD rootkit☆144Feb 29, 2024Updated 2 years ago
- My Linux profiles built for Volatility 2/3☆11Oct 11, 2025Updated 9 months ago
- POC of GITHUB simple C2 in rust☆54Jul 27, 2025Updated 11 months ago
- a minimal, position-independent C shellcode framework for Windows x64. compiles entirely on Linux☆64Jun 13, 2026Updated last month
- ☆12Feb 12, 2022Updated 4 years ago
- Real-time command injection monitor with syntax highlighting and balance analysis.☆23Sep 24, 2025Updated 9 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Pack/Encrypt/Obfuscate ELF + SHELL scripts☆456Apr 11, 2026Updated 3 months ago
- Stealthy Linux Kernel Rootkit for modern kernels (6x)☆1,717Jun 11, 2026Updated last month
- QEMU guest-to-host escape exploit☆32Mar 17, 2026Updated 4 months ago
- A fork of openssh-portable for penetration testing purposes.☆11May 18, 2018Updated 8 years ago
- example using NtCreateUserProcess in rust☆19Jan 20, 2025Updated last year
- ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits☆142Feb 28, 2023Updated 3 years ago
- Code injection from Linux kernel to a process☆24May 19, 2023Updated 3 years ago
- PoC Bypass Chrome Cookies App-Bound Encryption v20☆10Apr 9, 2025Updated last year
- DarkC0ders net is a open source botnet which is programmed in C#, using the .NET 2.0 Framework.☆10Dec 1, 2019Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- An IDA processor for eBPF bytecode☆51Oct 13, 2021Updated 4 years ago
- an Improoved Version of 0xNinjaCyclone´s EarlyCascade Code☆22Feb 20, 2025Updated last year
- ☆18Aug 8, 2024Updated last year
- medium interaction postgresql honeypot☆13Aug 6, 2024Updated last year
- VDM sig bypass and additional WinAPI stubs☆19Feb 16, 2026Updated 5 months ago
- My take on the Win10 Task Cleaner UAC bypass.☆18Mar 14, 2019Updated 7 years ago
- Havoc Professional backend plugin to allow ingesting of events and logs to Ghostwriter☆16Feb 25, 2026Updated 4 months ago