armosec / curingLinks
io_uring based rootkit
☆247Updated 8 months ago
Alternatives and similar repositories for curing
Users that are interested in curing are comparing it to the libraries listed below
Sorting:
- eBPF hacks☆194Updated last year
- A Linux kernel rootkit in Rust using a custom made type-2 hypervisor, eBPF XDP and TC programs☆335Updated 6 months ago
- Userland exec PoC to be used as attack vector technique☆94Updated 2 months ago
- Circumventing "noexec" mount flag to execute arbitrary linux binaries by ptrace-less process injection☆136Updated 7 months ago
- A library for intercepting system calls☆103Updated last year
- eBPF Memory Dump Tool☆97Updated 4 months ago
- Make your programs stealthier🐝☆198Updated 7 months ago
- Rust Linux Kernel Module designed for LKM rootkit detection☆58Updated 10 months ago
- Zaps arguments and environment from the process list☆240Updated last year
- Utility to find hidden Linux kernel modules☆146Updated 5 months ago
- nysm is a stealth post-exploitation container.☆265Updated 7 months ago
- Python tool to resolve all strings in Go binaries obfuscated by garble☆182Updated 10 months ago
- Open Source eBPF Malware Analysis Framework☆54Updated last year
- ☆137Updated last year
- An eBPF playground☆210Updated 2 years ago
- WallEscape vulnerability in util-linux☆51Updated last year
- VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF☆167Updated last year
- Stealthy Linux Kernel Rootkit for modern kernels (6x)☆836Updated last week
- ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries…☆197Updated 2 years ago
- ☆86Updated last week
- This tool have the power to hide any PID/directory in the Linux kernel☆30Updated last year
- A collection of bypasses and exploits for eBPF-based cloud security.☆25Updated 2 years ago
- An ssh honeypot with the XZ backdoor. CVE-2024-3094☆144Updated last year
- NIST-based CVE lookup store and API powered by Rust.☆136Updated 4 months ago
- ☆170Updated 3 years ago
- reverse shell using curl☆216Updated 10 months ago
- ☆90Updated last month
- Deep Linux runtime visibility meets Wireshark☆300Updated 2 months ago
- Elf binary infector written in Go.☆214Updated last year
- Intercept stdin/stdout/stderr for any process☆201Updated 3 years ago