☆518Nov 21, 2020Updated 5 years ago
Alternatives and similar repositories for Windows-Rootkits
Users that are interested in Windows-Rootkits are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Kernel rootkit, that lives inside the Windows registry values data☆504Oct 8, 2017Updated 9 years ago
- ☆145Nov 24, 2025Updated 11 months ago
- This is the list of all rootkits found so far on github and other sites.☆1,483Aug 29, 2025Updated last year
- A kernel-mode rootkit with remote control☆225Nov 13, 2020Updated 5 years ago
- Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc☆2,069Jul 13, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- windows kernel security development☆2,071Sep 6, 2022Updated 4 years ago
- Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.☆946Mar 29, 2022Updated 4 years ago
- GreenKit is an userland rootkit hiding its own files and mining bitcoins on compromised computers. Do /NOT/ download or use this rootkit …☆48Jan 19, 2018Updated 8 years ago
- A Windows kernel-mode rootkit that abuses legitimate communication channels to control a machine.☆722Aug 5, 2020Updated 6 years ago
- Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.☆2,208Jul 28, 2026Updated 3 months ago
- ☆24Feb 21, 2016Updated 10 years ago
- Hook system calls on Windows by using Kaspersky's hypervisor☆1,325Apr 2, 2026Updated 6 months ago
- A basic Direct Kernel Object Manipulation rootkit that removes a process from the EPROCESS list, hiding it from the Task Manager☆711Mar 26, 2019Updated 7 years ago
- Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)☆828Mar 10, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆831Dec 28, 2019Updated 6 years ago
- Reverse engineered source code of the autochk rootkit☆213Nov 1, 2019Updated 6 years ago
- proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC☆1,297May 1, 2024Updated 2 years ago
- A tool to help malware analysts tell that the sample is injecting code into other process.☆79Aug 12, 2015Updated 11 years ago
- Kernel mode driver loader, injecting into the windows kernel, Rootkit. Driver injections.☆47Nov 9, 2014Updated 11 years ago
- ☆410Mar 1, 2017Updated 9 years ago
- MemoryRanger protects kernel data and code by running drivers and hosting data in isolated kernel enclaves using VT-x and EPT features. M…☆248Aug 31, 2026Updated 2 months ago
- Protects deletion of files with a specified extension using a kernel-mode driver.☆76Jul 16, 2018Updated 8 years ago
- linux rootkit☆162Feb 12, 2018Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A free but powerful Windows kernel research tool.☆2,731Updated this week
- A simple rootkit to hide a process☆48Jan 10, 2014Updated 12 years ago
- Hide codes/data in the kernel address space.☆185May 8, 2021Updated 5 years ago
- WinDBG Anti-RootKit Extension☆642Jul 29, 2020Updated 6 years ago
- A kernel rootkit with remote command and control interface for windows☆107Jan 22, 2018Updated 8 years ago
- Turn off PatchGuard in real time for win7 (7600) ~ later☆1,048Apr 21, 2022Updated 4 years ago
- Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality.☆677Nov 9, 2023Updated 2 years ago
- RootKit & Cheat Scanner - Windows☆228Aug 9, 2019Updated 7 years ago
- 内核级ARK工具。☆60Aug 1, 2016Updated 10 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- windows LPC library☆44Jun 7, 2013Updated 13 years ago
- Static Library For Windows Drivers☆42Jun 19, 2026Updated 4 months ago
- Hidden kernel mode code execution for bypassing modern anti-rootkits.☆84Dec 23, 2010Updated 15 years ago
- pseudo-code to show how to disable patchguard with win10☆294Jan 13, 2018Updated 8 years ago
- Protected Processes Light Killer☆1,004Mar 24, 2023Updated 3 years ago
- Papers, blogposts, tutorials etc for learning about Windows kernel exploitation, internals and (r|b)ootkits☆422Jan 2, 2020Updated 6 years ago
- Syscall Monitor is a system monitor program (like Sysinternal's Process Monitor) using Intel VT-X/EPT for Windows7+☆750Jun 26, 2017Updated 9 years ago