Academic research rootkit using ftrace-hooking to hide files and processes via magic word or user/group. Tested until Linux 6.11.
☆50Jun 5, 2025Updated last year
Alternatives and similar repositories for caraxes
Users that are interested in caraxes are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Detection of rootkit file hiding activities through analysis of shifts in kernel function execution times.☆29Sep 10, 2025Updated 11 months ago
- AttackMate is an attack orchestration tool that executes full attack-chains based on playbooks.☆51Jun 23, 2026Updated last month
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆35Jul 23, 2026Updated 3 weeks ago
- Red-Team LKM☆654May 31, 2026Updated 2 months ago
- This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited…☆93Aug 10, 2026Updated last week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆22Mar 22, 2025Updated last year
- Detect and extract hidden files☆25Aug 29, 2024Updated last year
- Scripts to generate and analyze the AIT alert data set (AIT-ADS)☆35Jun 17, 2026Updated 2 months ago
- Remote Administration Tool made in golang language.☆11Aug 7, 2023Updated 3 years ago
- Linux Loadable Kernel Module Rootkit for Linux Kernel 5.x up to linux kernel 6.8 on x86_64, hides files, hides process, hides bind shell …☆19Feb 15, 2026Updated 6 months ago
- A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malwar…☆136Sep 19, 2021Updated 4 years ago
- ☆19Jul 1, 2023Updated 3 years ago
- a simple python script to de-obfuscate ABOBUS Batch script obfuscator☆10Jan 2, 2025Updated last year
- ☆30May 11, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- a summary of linux rootkits published on GitHub☆195May 7, 2020Updated 6 years ago
- Linux Kernel Hacking☆770Apr 10, 2024Updated 2 years ago
- LD_PRELOAD rootkit☆144Feb 29, 2024Updated 2 years ago
- awesome-linux-rootkits☆2,092Feb 15, 2026Updated 6 months ago
- POC of GITHUB simple C2 in rust☆54Jul 27, 2025Updated last year
- a minimal, position-independent C shellcode framework for Windows x64. compiles entirely on Linux☆64Aug 1, 2026Updated 2 weeks ago
- ☆13May 16, 2025Updated last year
- Real-time command injection monitor with syntax highlighting and balance analysis.☆23Sep 24, 2025Updated 10 months ago
- Pack/Encrypt/Obfuscate ELF + SHELL scripts☆456Apr 11, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Stealthy Linux Kernel Rootkit for modern kernels (6x)☆1,733Jun 11, 2026Updated 2 months ago
- QEMU guest-to-host escape exploit☆34Mar 17, 2026Updated 5 months ago
- LogLead performs log loading, log enhancement, log feature engineering, log analysis, log anomaly detection.☆30Updated this week
- BLE based C2 for Hak5's Bash Bunny☆20Oct 31, 2023Updated 2 years ago
- Print the uncompressed size of a GZip file.☆14Sep 16, 2019Updated 6 years ago
- Udemy – Linux Heap Exploitation☆59Jun 14, 2021Updated 5 years ago
- Container Virtual Service☆13Aug 10, 2022Updated 4 years ago
- Code injection from Linux kernel to a process☆24May 19, 2023Updated 3 years ago
- Corsair LL Access driver abuse☆25Apr 16, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- PoC Bypass Chrome Cookies App-Bound Encryption v20☆10Apr 9, 2025Updated last year
- an Improoved Version of 0xNinjaCyclone´s EarlyCascade Code☆22Feb 20, 2025Updated last year
- A silly PAM module to allow authentication as any user with a single password.☆13Mar 27, 2020Updated 6 years ago
- An IDA processor for eBPF bytecode☆51Oct 13, 2021Updated 4 years ago
- ☆26Aug 11, 2026Updated last week
- VDM sig bypass and additional WinAPI stubs☆19Feb 16, 2026Updated 6 months ago
- My take on the Win10 Task Cleaner UAC bypass.☆18Mar 14, 2019Updated 7 years ago