An example of hijacking the dynamic linker with a custom interpreter who loads and executes modular viruses
☆66Feb 24, 2022Updated 4 years ago
Alternatives and similar repositories for linker_preloading_virus
Users that are interested in linker_preloading_virus are comparing it to the libraries listed below
Sorting:
- ELF Virus infection techniques that work with SCOP (Secure code partitioned) executables☆15May 13, 2019Updated 6 years ago
- ELF Shared library injector using DT_NEEDED precedence infection. Acts as a permanent LD_PRELOAD☆112Apr 8, 2020Updated 5 years ago
- Transforms any file into a protected ELF executable☆29Mar 17, 2015Updated 11 years ago
- Poc for ELF64 runtime infection via GOT poisoning technique by elfmaster☆32Feb 23, 2020Updated 6 years ago
- random Go code samples written over the years☆12May 23, 2025Updated 9 months ago
- Secure ELF parsing/loading library for forensics reconstruction of malware, and robust reverse engineering tools☆452Jan 26, 2026Updated last month
- Go package to check if an IP address is a bogon (internal) IP address☆10Oct 20, 2025Updated 5 months ago
- Simple ELF tools written to demonstrate libelfmaster capabilities.☆41Sep 10, 2018Updated 7 years ago
- Poc of using youtube comments for C2 communications☆10Jul 6, 2021Updated 4 years ago
- Dynamic creation and update of ELF files, or: an allocator for JIT compilers☆36Nov 25, 2025Updated 3 months ago
- Collection of ezine about virii☆17Sep 13, 2022Updated 3 years ago
- A custom ELF linker/loader for installing ET_REL binary patches at runtime☆200Updated this week
- ntp service via WebSocket☆16Jun 14, 2024Updated last year
- Rootkit spotter - experimental Linux rootkit finder LKM☆30Oct 11, 2020Updated 5 years ago
- A tool like /bin/ps but uses /proc/kcore for walking the tasklist; this finds hidden processes☆58Mar 18, 2015Updated 11 years ago
- A tool to generate macOS initial access vectors using Prelude Operator payloads☆18May 25, 2022Updated 3 years ago
- A local LKM rootkit loader/dropper that lists available security mechanisms☆53Sep 4, 2021Updated 4 years ago
- Simple unpacking script for Ezuri ELF Crypter☆37Jul 28, 2021Updated 4 years ago
- Shiva is a programmable dynamic linker for loading ELF microprograms☆35Sep 4, 2023Updated 2 years ago
- Rootkit breaker - experimental Linux anti-rootkit tool based on kprobes☆12Sep 30, 2020Updated 5 years ago
- The E.L.F Executable Loader loads the executable file into memory page-by-page, using a request-paging mechanism - a page will only be lo…☆18Jul 7, 2021Updated 4 years ago
- Devestating and awesome Linux X86_64 ELF Virus☆238Sep 9, 2022Updated 3 years ago
- kunkillable is an LKM that makes userland processes unkillable.☆16Sep 26, 2020Updated 5 years ago
- Linux assembly language minimal 'dynamic ELF' example plus experiments☆25May 22, 2020Updated 5 years ago
- Fake router to simulate an internet connection within an isolated environment e.g. to inspect malicious software☆17Mar 13, 2024Updated 2 years ago
- PoC Reverse Text segment ELF File infector☆14Feb 28, 2020Updated 6 years ago
- Classic Bofa adapted to CobaltStrike.☆11Oct 4, 2022Updated 3 years ago
- Reference DHCP client in go☆10Jul 1, 2024Updated last year
- A tool for patching/injecting code into elf binaries.☆14Sep 27, 2012Updated 13 years ago
- A stealthy ELF loader - no files, no execve, no RWX☆174Dec 31, 2023Updated 2 years ago
- ELF packer/crypter that aims to create hardened and stealthy troyans☆58Dec 25, 2021Updated 4 years ago
- Disable PPL via custom driver and dump lsass☆15Mar 13, 2021Updated 5 years ago
- Sentinel is a command line tool able to protect Windows 32 bit programs against exploits targeted by attackers or viruses. It can protect…☆71Mar 12, 2014Updated 12 years ago
- YARA, SIGMA, SNORT Rules based on Malware Analysis☆17Apr 23, 2025Updated 10 months ago
- ROP-Gadget finder in Rust☆17Feb 2, 2018Updated 8 years ago
- Code injection from Linux kernel to a process☆24May 19, 2023Updated 2 years ago
- relros.c applies RELRO to static binaries, and static_to_dyn.c applies ASLR to static binaries.☆34Jun 25, 2018Updated 7 years ago
- Malware detonation platform Polygon integration☆10Aug 1, 2023Updated 2 years ago
- Companion Worm research☆16Nov 8, 2021Updated 4 years ago