A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malware and more.
☆136Sep 19, 2021Updated 5 years ago
Alternatives and similar repositories for Umbra
Users that are interested in Umbra are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Offensive Linux tool for network attacks. Built from the ground with only C.☆13May 1, 2021Updated 5 years ago
- bdvl☆119Feb 26, 2022Updated 4 years ago
- Пример руткита для ядра линукс 5☆18Dec 4, 2020Updated 5 years ago
- A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.☆1,981Apr 7, 2024Updated 2 years ago
- ☆356May 16, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- LD_PRELOAD rootkit☆144Feb 29, 2024Updated 2 years ago
- Rootkit spotter - experimental Linux rootkit finder LKM☆31Oct 11, 2020Updated 5 years ago
- A local LKM rootkit loader/dropper that lists available security mechanisms☆55Sep 4, 2021Updated 5 years ago
- Basic Linux binary shim method on the passwd binary from the shadow package to steal credentials as they are changed.☆14Nov 14, 2024Updated last year
- AdminX it's a Malware to execute process as some users from a Windows OS☆12May 4, 2023Updated 3 years ago
- Go implementation of the Heaven's Gate technique☆100Feb 11, 2021Updated 5 years ago
- A simple LKM kernel space rootkit for v5.x linux with multiple functions.☆11Aug 13, 2020Updated 6 years ago
- Windows PE - TLS (Thread Local Storage) Injector in C/C++☆106Jan 3, 2021Updated 5 years ago
- Source Code Management Attack Toolkit☆13Aug 1, 2022Updated 4 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- The LKM rootkit working in Linux Kernels 2.6.x/3.x/4.x/5.x☆140Aug 8, 2023Updated 3 years ago
- Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.☆1,678Oct 19, 2023Updated 2 years ago
- Linux rust keylogger☆17Mar 1, 2024Updated 2 years ago
- Linux Kernel module-less implant (backdoor)☆73Mar 11, 2021Updated 5 years ago
- A LKM rootkit for most newer kernel versions.☆181Sep 17, 2017Updated 9 years ago
- Small and convenient C2 tool for Windows targets☆622Mar 8, 2022Updated 4 years ago
- Repo of RIT CCDC Team Scripts☆13Mar 28, 2022Updated 4 years ago
- A quick LKM rootkit that executes a reverse TCP netcat shell with root privileges.☆42Jun 8, 2018Updated 8 years ago
- Ftrace Based Linux Loadable Kernel Module Rootkit for Linux Kernel 5.x up to linux kernel 6.2 on x86_64, hides files, hides process, hide…☆42May 14, 2026Updated 4 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- C++ Privilege Escalation Class to execute Process As Admin from User and Process as NT AUTHORITY SYSTEM from Admin☆24Aug 21, 2023Updated 3 years ago
- Pass the Hash to a named pipe for token Impersonation☆308Nov 29, 2023Updated 2 years ago
- TCP Port Redirection Utility☆787Jan 31, 2023Updated 3 years ago
- Red-Team LKM☆658May 31, 2026Updated 3 months ago
- ☆125May 12, 2021Updated 5 years ago
- Windows NTLM Authentication Backdoor☆241Jan 15, 2025Updated last year
- A multi-staged malware that contains a kernel mode rootkit and a remote system shell.☆73May 20, 2021Updated 5 years ago
- Universal Linux LKM rootkit, designed to work in any kernel version and both architectures (i686 and x86_64).☆53Jan 15, 2024Updated 2 years ago
- ☆51Jun 28, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- awesome-linux-rootkits☆2,104Feb 15, 2026Updated 7 months ago
- LD_PRELOAD Rootkit☆335Apr 5, 2025Updated last year
- Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.☆946Mar 29, 2022Updated 4 years ago
- Load a dynamic library from memory using a fuse mount☆33Sep 15, 2023Updated 3 years ago
- DDoor - cross platform backdoor using dns txt records☆30Sep 27, 2021Updated 5 years ago
- Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging☆587Mar 8, 2024Updated 2 years ago
- Killing your preferred antimalware by abusing native symbolic links and NT paths.☆361Jan 29, 2022Updated 4 years ago