Alternatives and similar repositories for curing

Users that are interested in curing are comparing it to the libraries listed below

• DualHorizon / blackpill
  A Linux kernel rootkit in Rust using a custom made type-2 hypervisor, eBPF XDP and TC programs
  ☆335Updated this week
• hackerschoice / bpfhacks
  eBPF hacks
  ☆187Updated 6 months ago
• hackerschoice / memexec
  Circumventing "noexec" mount flag to execute arbitrary linux binaries by ptrace-less process injection
  ☆116Updated last month
• eurecom-s3 / lemon
  eBPF Memory Dump Tool
  ☆74Updated last week
• thalium / rkchk
  Rust Linux Kernel Module designed for LKM rootkit detection
  ☆48Updated 3 months ago
• hardenedlinux / userland-exec
  Userland exec PoC to be used as attack vector technique
  ☆85Updated 4 months ago
• vimpostor / copycat
  A library for intercepting system calls
  ☆96Updated 5 months ago
• hackerschoice / zapper
  Zaps arguments and environment from the process list
  ☆200Updated last year
• hardenedvault / ved-ebpf
  VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF
  ☆158Updated 9 months ago
• skyler-ferrante / CVE-2024-28085
  WallEscape vulnerability in util-linux
  ☆51Updated last year
• h2337 / modreveal
  Utility to find hidden Linux kernel modules
  ☆144Updated 6 months ago
• blasty / JiaTansSSHAgent
  ☆134Updated last year
• adgaultier / tamanoir
  An eBPF🐝 Keylogger with C2-based RCE payload delivery
  ☆279Updated last month
• anvilsecure / ulexecve
  ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries…
  ☆189Updated last year
• hacking-support / DVUEFI
  Damn Vulnerable UEFI
  ☆283Updated 9 months ago
• lockness-Ko / xz-vulnerable-honeypot
  An ssh honeypot with the XZ backdoor. CVE-2024-3094
  ☆142Updated last year
• recontech404 / Kairos
  Open Source eBPF Malware Analysis Framework
  ☆48Updated 8 months ago
• airbus-seclab / soxy
  A suite of services (SOCKS, FTP, shell, etc.) over Citrix, VMware Horizon and native Windows RDP virtual channels.
  ☆248Updated last week
• quarkslab / peetch
  An eBPF playground
  ☆206Updated last year
• mebeim / linux-syscalls
  🌐🐧 Browsable Linux kernel syscall tables built with Systrack (https://github.com/mebeim/systrack)
  ☆185Updated 2 months ago
• SecurityInnovation / glibc_heap_exploitation_training
  The resources for glibc Malloc heap exploitation course by Maxwell Dulin and Security Innovation.
  ☆158Updated 7 months ago
• eeriedusk / nysm
  nysm is a stealth post-exploitation container.
  ☆250Updated last week
• DavidBuchanan314 / stelf-loader
  A stealthy ELF loader - no files, no execve, no RWX
  ☆167Updated last year
• hackerschoice / ttyinject
  Get root via TTY / TIOCSTI stuffing
  ☆76Updated last month
• mandiant / gostringungarbler
  Python tool to resolve all strings in Go binaries obfuscated by garble
  ☆107Updated 4 months ago
• cxiao / rust-reversing-workshop-recon-2024
  Slides and files for the Reversing Rust Binaries: One step beyond strings workshop at REcon 2024, presented on June 28, 2024.
  ☆78Updated 11 months ago
• eeriedusk / knockles
  eBPF Port Knocking Tool
  ☆234Updated last year
• SkyperTHC / curlshell
  reverse shell using curl
  ☆206Updated 4 months ago
• Velocidex / Linpmem
  Linpmem is a linux memory acquisition tool
  ☆84Updated last year
• MatheuZSecurity / detect-lkm-rootkit-cheatsheet
  Cheat sheet to detect and remove linux kernel rootkit
  ☆67Updated 6 months ago