Educational Linux kernel rootkit PoC exploring DKOM, syscall hooking, stealth, observability and defensive detection
☆32Aug 9, 2026Updated 2 weeks ago
Alternatives and similar repositories for project-rvbbit
Users that are interested in project-rvbbit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- In-memory Encrypted Shellcode Execution Suite☆16Jan 26, 2026Updated 6 months ago
- Game of Kingshot Contest RE☆31Apr 18, 2026Updated 4 months ago
- A locally hosted page for cheat sheets. Currently being used for reverse engineering and hosted in labs so I can limit or forgo (lock dow…☆15Mar 19, 2026Updated 5 months ago
- Identify and extract files from container formats using unblob.☆28Jul 15, 2026Updated last month
- A checklist for systematically going through the OWASP Testing Guide V4☆17Jan 14, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- In-depth reverse engineering of a suspected LockBit affiliate dropper, documenting shellcode loading, import polymorphism, and payload de…☆15Jan 24, 2026Updated 7 months ago
- A stealthy stager designed for shellcode payloads staged with http/https like Sliver, or on github raw.☆59Jul 20, 2026Updated last month
- User-mode ETW interception and telemetry manipulation lab for Windows security research.☆44Jun 15, 2026Updated 2 months ago
- A high-fidelity x86_64 polymorphic mutation engine focused on instruction-level fragmentation and context preservation.☆112Jan 18, 2026Updated 7 months ago
- AST-based Python code transformation & deobfuscation framework☆17Aug 16, 2026Updated last week
- ☆64Jul 12, 2026Updated last month
- My studies on Malware Development☆20Jul 6, 2026Updated last month
- Set of PoC to abuse Windows minifilters functionality☆94May 1, 2026Updated 3 months ago
- Usermode detector that catches indirect syscalls. Traps Hell's Hall, Tartarus' Gate, RecycledGate, and VEH syscalls & Many more.☆86Jun 15, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆16Jul 1, 2026Updated last month
- ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.☆33Apr 12, 2026Updated 4 months ago
- A Python agent targeting Linux for Mythic C2☆18Mar 6, 2026Updated 5 months ago
- This project focuses on static and dynamic malware analysis using REMnux and FlareVM. It involves setting up analysis environments on bot…☆23Jun 12, 2024Updated 2 years ago
- A protracted people's rootkit.☆19May 1, 2026Updated 3 months ago
- A Windows x64 offensive research framework that constructs fully synthetic call stacks☆69Jul 14, 2026Updated last month
- PoC to tunnel via AWS Short-Message-Queues☆24Jun 21, 2025Updated last year
- Force target victim to unsafe network☆33Jun 6, 2025Updated last year
- Executes at the silicon boundary☆29Jul 16, 2026Updated last month
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Agent skills for VulHunt☆15Mar 7, 2026Updated 5 months ago
- Semantic strings based on tree-sitter☆17Feb 19, 2025Updated last year
- A security research tool for enabling Chrome DevTools Protocol (CDP) debugging on Microsoft Edge browser processes at runtime.☆25Jan 2, 2026Updated 7 months ago
- ☆23Jul 6, 2025Updated last year
- Adaptix C2 extender to support Cobalt Strike Malleable C2 profiles☆51Jun 28, 2026Updated last month
- A Fast, Modular, and Scalable TLS/SSL Security Scanner Written in Rust☆36Updated this week
- Windows native ETW inspection suite for browsing providers, reading metadata, consuming live events, recording ETL traces, filtering resu…☆109Jul 27, 2026Updated 3 weeks ago
- Run PowerShell command without invoking powershell.exe☆27Apr 9, 2026Updated 4 months ago
- Security Descriptor Definition Language (SDDL) Parser☆38Sep 24, 2025Updated 11 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- .NET assembly loader with patching AMSI and ETW bypass☆33Apr 16, 2025Updated last year
- A PoC backdoor that uses Gmail as a C&C server☆13Jun 28, 2020Updated 6 years ago
- KitsuneC2 is a cross-platform adversary emulation tool written in Go.☆13Oct 25, 2024Updated last year
- Windows Shell Link (LNK) Proof of Concept☆16Jul 19, 2025Updated last year
- PCB design for the initial prototype of OBC hardware, to interface with LaunchPad.☆10Sep 19, 2018Updated 7 years ago
- InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution☆221Updated this week
- powershell script i wrote that can suspend an arbitrary process (with limits)☆22Mar 26, 2023Updated 3 years ago