bluedragonsecurity / bds_lkm_ftraceLinks
Ftrace Based Linux Loadable Kernel Module Rootkit for Linux Kernel 5.x and 6.x on x86_64, hides files, hides process, hides bind shell & reverse shell port, privilege escalation, cleans up logs and bash history during installation
☆28Updated last week
Alternatives and similar repositories for bds_lkm_ftrace
Users that are interested in bds_lkm_ftrace are comparing it to the libraries listed below
Sorting:
- Linux Kernel module-less implant (backdoor)☆73Updated 4 years ago
- yet another hidden LKM hunter☆29Updated 4 months ago
- Circumventing "noexec" mount flag to execute arbitrary linux binaries by ptrace-less process injection☆136Updated 8 months ago
- A utility to fix intentionally corrupted UPX packed files.☆93Updated 2 years ago
- ☆90Updated last year
- A collection of Linux kernel rootkits found across the internet taken and put together☆94Updated 3 years ago
- A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malwar…☆133Updated 4 years ago
- Code injection from Linux kernel to a process☆24Updated 2 years ago
- An example of hijacking the dynamic linker with a custom interpreter who loads and executes modular viruses☆66Updated 3 years ago
- Proof of concept for injecting simple shellcode via ptrace into a running process.☆72Updated 3 years ago
- NASM Linux x86_64 pure (no deps) shared library (.so), POC for Reflective ELF SO injection☆31Updated 2 years ago
- Linux rootkit for educational purposes☆34Updated last year
- Report and exploit of CVE-2023-36427☆90Updated 2 years ago
- bdvl☆115Updated 3 years ago
- Matryoshka - stacked LKM loader☆54Updated 2 years ago
- Academic project of Linux rootkit made for Bachelor Engineering Thesis.☆117Updated last year
- LD_PRELOAD rootkit☆137Updated last year
- GERMY is a Linux Kernel n-day in the N_GSM line discipline☆49Updated last year
- Anti-analysis tool that obfuscates ELF files☆36Updated 4 years ago
- In line function hooking LKM rootkit☆52Updated 5 years ago
- PoC code and tools for Black Hat USA 2024☆24Updated last year
- The LKM rootkit working in Linux Kernels 2.6.x/3.x/4.x/5.x☆132Updated 2 years ago
- PoC code of Shade BIOS (stripped) presented at Black Hat USA 2025☆60Updated 6 months ago
- One Bootloader to Load Them All - Research materials, Code , Etc.☆63Updated 3 years ago
- Packer/Protector for x86-64 ELF binaries on Linux☆190Updated 4 years ago
- ☆85Updated 5 months ago
- A command line Windows API tracing tool for Golang binaries.☆159Updated 2 years ago
- Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypa…☆262Updated last month
- A personal collection of Windows CVE I have turned in to exploit source, as well as a collection of payloads I've written to be used in c…☆123Updated 3 years ago
- A Simple Linux ELF Runtime Crypter☆266Updated 11 months ago