An example of hijacking the dynamic linker with a custom interpreter who loads and executes modular viruses
☆66Feb 24, 2022Updated 4 years ago
Alternatives and similar repositories for linker_preloading_virus
Users that are interested in linker_preloading_virus are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ELF Virus infection techniques that work with SCOP (Secure code partitioned) executables☆15May 13, 2019Updated 7 years ago
- Highly advanced Linux anti-exploitation and anti-tamper binary protector for ELF.☆162Sep 3, 2022Updated 4 years ago
- Obfuscates dynamic symbol table☆136Jan 10, 2019Updated 7 years ago
- ELF Shared library injector using DT_NEEDED precedence infection. Acts as a permanent LD_PRELOAD☆111Apr 8, 2020Updated 6 years ago
- Poc for ELF64 runtime infection via GOT poisoning technique by elfmaster☆34Feb 23, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Transforms any file into a protected ELF executable☆29Mar 17, 2015Updated 11 years ago
- Go package to check if an IP address is a bogon (internal) IP address☆10Aug 6, 2026Updated last month
- random Go code samples written over the years☆12May 23, 2025Updated last year
- Secure ELF parsing/loading library for forensics reconstruction of malware, and robust reverse engineering tools☆456Jan 26, 2026Updated 7 months ago
- Poc of using youtube comments for C2 communications☆10Jul 6, 2021Updated 5 years ago
- NTP service via WebSocket☆16Updated this week
- Collection of ezine about virii☆21Sep 13, 2022Updated 4 years ago
- Yet another Linux Rootkit☆16Oct 28, 2021Updated 4 years ago
- Be able to execute memory snapshots so they can start running where they left off.☆37Apr 14, 2015Updated 11 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A custom ELF linker/loader for installing ET_REL binary patches at runtime☆223Aug 4, 2026Updated last month
- ELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection)☆140Mar 14, 2018Updated 8 years ago
- Rootkit spotter - experimental Linux rootkit finder LKM☆31Oct 11, 2020Updated 5 years ago
- ☆11Sep 26, 2019Updated 6 years ago
- A tool like /bin/ps but uses /proc/kcore for walking the tasklist; this finds hidden processes☆60Mar 18, 2015Updated 11 years ago
- ☆10Jul 13, 2022Updated 4 years ago
- A tool to generate macOS initial access vectors using Prelude Operator payloads☆18May 25, 2022Updated 4 years ago
- Hacky code for extracting calls in DLLs by function☆16Jun 3, 2022Updated 4 years ago
- A local LKM rootkit loader/dropper that lists available security mechanisms☆54Sep 4, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Shiva is a programmable dynamic linker for loading ELF microprograms☆36Sep 4, 2023Updated 3 years ago
- Rootkit breaker - experimental Linux anti-rootkit tool based on kprobes☆12Sep 30, 2020Updated 5 years ago
- Companion Worm research☆18Nov 8, 2021Updated 4 years ago
- Devestating and awesome Linux X86_64 ELF Virus☆239Sep 9, 2022Updated 4 years ago
- kunkillable is an LKM that makes userland processes unkillable.☆17Sep 26, 2020Updated 5 years ago
- Linux assembly language minimal 'dynamic ELF' example plus experiments☆25May 22, 2020Updated 6 years ago
- Reference DHCP client in go☆10Jul 1, 2024Updated 2 years ago
- Tools that i have gatherd and study to see how thay work and learned why theses tools execute there attacks. I started to have the intres…☆12Dec 25, 2020Updated 5 years ago
- Disable PPL via custom driver and dump lsass☆15Mar 13, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Sentinel is a command line tool able to protect Windows 32 bit programs against exploits targeted by attackers or viruses. It can protect…☆72Mar 12, 2014Updated 12 years ago
- A stealthy ELF loader - no files, no execve, no RWX☆177Dec 31, 2023Updated 2 years ago
- Code injection from Linux kernel to a process☆23May 19, 2023Updated 3 years ago
- ELF packer/crypter that aims to create hardened and stealthy troyans☆57Dec 25, 2021Updated 4 years ago
- Reverse TCP Powershell has never been this paranoid. (basically an Opsec-safe reverse powershell)☆30Feb 4, 2022Updated 4 years ago
- Send keyboard events with Golang☆22Nov 5, 2023Updated 2 years ago
- Nice try reading NTDLL from disk, nerd.☆19Apr 18, 2022Updated 4 years ago