h3xduck / TripleCross
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
☆1,807Updated 9 months ago
Alternatives and similar repositories for TripleCross:
Users that are interested in TripleCross are comparing it to the libraries listed below
- Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.☆1,581Updated last year
- ebpfkit is a rootkit powered by eBPF☆775Updated last year
- Credentials Dumper for Linux using eBPF☆1,128Updated 4 months ago
- awesome-linux-rootkits☆1,759Updated 2 weeks ago
- Linux Kernel Hacking☆663Updated 9 months ago
- A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29