croemheld / lkm-rootkitLinks
A LKM rootkit for most newer kernel versions.
☆180Updated 8 years ago
Alternatives and similar repositories for lkm-rootkit
Users that are interested in lkm-rootkit are comparing it to the libraries listed below
Sorting:
- linux rootkit adapted for 2.6 and 3.x☆216Updated 9 years ago
- Fully functional but simplified Linux Kernel Module (LKM) Rootkit for educational purposes☆62Updated 6 years ago
- Example of hooking a linux systemcall☆63Updated 7 years ago
- Linux based inter-process code injection without ptrace(2)☆254Updated 8 years ago
- JynxKit2 is an LD_PRELOAD userland rootkit based on the original JynxKit. The backdoor has been replaced with an "accept()" system hook.☆181Updated 12 years ago
- Code for my 0x00sec.org posts☆330Updated 5 years ago
- linux elf injector for x86 x86_64 arm arm64☆342Updated 7 years ago
- a summary of linux rootkits published on GitHub☆185Updated 5 years ago
- LKM rootkit for Linux x86 with the 2.6 kernel. It inserts salts inside system_call and sysenter_entry.☆87Updated 2 years ago
- Linux Kernel hooking engine (x86)☆376Updated last month
- Devestating and awesome Linux X86_64 ELF Virus☆233Updated 3 years ago
- ELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection)☆139Updated 7 years ago
- Injects code into ELF executables post-build☆235Updated last year
- Linux v4.x.x Rootkit☆94Updated last year
- Linux Rootkit Scanner☆87Updated 3 years ago
- A collection of Linux kernel rootkits found across the internet taken and put together☆88Updated 3 years ago
- ROPME is a set of python scripts to generate ROP gadgets and payload.☆149Updated 9 years ago
- Matryoshka - stacked LKM loader☆54Updated 2 years ago
- Linux BootKit☆32Updated 8 years ago
- Proof of concept for injecting simple shellcode via ptrace into a running process.☆73Updated 3 years ago
- Reflective SO injection is a library injection technique in which the concept of reflective programming is employed to perform the loadin…☆118Updated 9 years ago
- ☆286Updated 5 years ago
- Shadow-Box: Lightweight and Practical Kernel Protector for x86 (Presented at BlackHat Asia 2017/2018, beVX 2018 and HITBSecConf 2017)☆188Updated 6 years ago
- ROPium is a tool that helps you building ROP exploits by finding and chaining gadgets together☆388Updated 2 years ago
- Simple Polymorphic x86_64 Runtime Code Segment Cryptor☆59Updated 7 years ago
- ELF Shared library injector using DT_NEEDED precedence infection. Acts as a permanent LD_PRELOAD☆111Updated 5 years ago
- linux rootkit☆162Updated 7 years ago
- PoC for CVE-2020-0601- Windows CryptoAPI (Crypt32.dll)☆891Updated 5 years ago
- Zerokit/GAPZ rootkit (non buildable and only for researching)☆183Updated 6 years ago
- Collection of shellcodes that use a variety of syscalls in order to bypass some seccomp configurations☆72Updated 8 years ago