compilepeace / EVIL_RABBIT
-x-x-x- DO NOT RUN ON PRODUCTION MACHINE -x-x-x- LD_PRELOAD based user-land rootkit for Linux platform.
☆27Updated 4 years ago
Alternatives and similar repositories for EVIL_RABBIT:
Users that are interested in EVIL_RABBIT are comparing it to the libraries listed below
- ☆27Updated 5 years ago
- An attempt to restore and adapt to modern Win10 version the 'Rootkit Arsenal' original code samples☆69Updated 2 years ago
- A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malwar…☆122Updated 3 years ago
- BPFDoor Source Code. Originally found from Chinese Threat Actor Red Menshen☆44Updated 2 years ago
- A local LKM rootkit loader/dropper that lists available security mechanisms☆52Updated 3 years ago
- ☆47Updated 2 years ago
- Gozi ISFB is a well-known and widely distributed banking trojan, and has been in the threat landscape for the past several years.☆64Updated 7 years ago
- "An Introduction to Windows Exploit Development" is an open sourced, free Windows exploit development course I created for the Southeast …☆39Updated 4 years ago
- Recreating and reviewing the Windows persistence methods☆37Updated 3 years ago
- A collection of shellcode hashes☆17Updated 6 years ago
- A multi-staged malware that contains a kernel mode rootkit and a remote system shell.☆72Updated 3 years ago
- Proxy system calls over an RPC channel☆98Updated 3 years ago
- In line function hooking LKM rootkit☆51Updated 5 years ago
- (Sim)ulate (Ba)zar Loader☆29Updated 4 years ago
- This course is designed to expose students to advanced exploitation techniques. Topics include the use of automated exploitation tools a…☆28Updated 4 years ago
- ☆16Updated 3 years ago
- ☆23Updated 4 years ago
- A repository where I share my injection implemintations☆29Updated 4 years ago
- Rite Of Passage ROP Injector☆34Updated 5 years ago
- Matryoshka - stacked LKM loader☆50Updated last year
- ☆61Updated 8 months ago
- Proof of concept for injecting simple shellcode via ptrace into a running process.☆69Updated 2 years ago
- ☆14Updated 2 years ago
- Simple 32/64-bit PEs loader.☆137Updated 6 years ago
- ☆67Updated last year
- ☆48Updated 4 years ago
- TrashDBG the world's worse debugger☆23Updated 3 years ago
- A small commented POC for removing API hooks placed by AV/EDR.☆33Updated 4 years ago
- Evasive ELF Static PIE User-Land-Exec featured in Tmpout Vol 1.☆26Updated 3 years ago
- pypykatz plugin for volatility3 framework☆39Updated 11 months ago