A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malware and more.
☆138Sep 19, 2021Updated 5 years ago
Alternatives and similar repositories for Umbra
Users that are interested in Umbra are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Offensive Linux tool for network attacks. Built from the ground with only C.☆13May 1, 2021Updated 5 years ago
- A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.☆1,993Apr 7, 2024Updated 2 years ago
- A local LKM rootkit loader/dropper that lists available security mechanisms☆56Sep 4, 2021Updated 5 years ago
- Пример руткита для ядра линукс 5☆18Dec 4, 2020Updated 5 years ago
- LD_PRELOAD rootkit☆146Feb 29, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- bdvl☆119Feb 26, 2022Updated 4 years ago
- A simple LKM kernel space rootkit for v5.x linux with multiple functions.☆10Aug 13, 2020Updated 6 years ago
- A LKM rootkit for most newer kernel versions.☆181Sep 17, 2017Updated 9 years ago
- Linux v4.x.x Rootkit☆93Jul 27, 2024Updated 2 years ago
- Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.☆1,685Oct 19, 2023Updated 3 years ago
- Basic Linux binary shim method on the passwd binary from the shadow package to steal credentials as they are changed.☆14Nov 14, 2024Updated last year
- Reflective SO injection is a library injection technique in which the concept of reflective programming is employed to perform the loadin…☆117Aug 22, 2016Updated 10 years ago
- A dynamically loadable virtual-machine based rootkit designed for Linux Kernel v5.13.0 using AMD-V (SVM).☆40Oct 26, 2025Updated last year
- Ftrace Based Linux Loadable Kernel Module Rootkit for Linux Kernel 5.x up to linux kernel 6.2 on x86_64, hides files, hides process, hide…☆42May 14, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Go implementation of the Heaven's Gate technique☆99Feb 11, 2021Updated 5 years ago
- The home to the popular script named Voidware☆18Feb 10, 2025Updated last year
- Academic project of Linux rootkit made for Bachelor Engineering Thesis.☆122Mar 27, 2026Updated 7 months ago
- LD_PRELOAD Rootkit☆342Apr 5, 2025Updated last year
- Windows NTLM Authentication Backdoor☆241Jan 15, 2025Updated last year
- ☆359May 16, 2022Updated 4 years ago
- Red-Team LKM☆663Oct 18, 2026Updated 2 weeks ago
- Linux rust keylogger☆17Mar 1, 2024Updated 2 years ago
- Rootkit spotter - experimental Linux rootkit finder LKM☆31Oct 11, 2020Updated 6 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Windows PE - TLS (Thread Local Storage) Injector in C/C++☆108Jan 3, 2021Updated 5 years ago
- Decoders for 7ev3n ransomware☆17Oct 24, 2016Updated 10 years ago
- The GTK Keylogger☆17Aug 11, 2023Updated 3 years ago
- Small and convenient C2 tool for Windows targets☆621Mar 8, 2022Updated 4 years ago
- Linux Kernel module-less implant (backdoor)☆73Mar 11, 2021Updated 5 years ago
- ☆53Jun 28, 2022Updated 4 years ago
- awesome-linux-rootkits☆2,113Feb 15, 2026Updated 8 months ago
- Evasive ELF Static PIE User-Land-Exec featured in Tmpout Vol 1.☆30Sep 11, 2021Updated 5 years ago
- AdminX it's a Malware to execute process as some users from a Windows OS☆12May 4, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- C++ Privilege Escalation Class to execute Process As Admin from User and Process as NT AUTHORITY SYSTEM from Admin☆24Aug 21, 2023Updated 3 years ago
- Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.☆948Mar 29, 2022Updated 4 years ago
- Mara is a userland pty/tty sniffer☆53Dec 22, 2023Updated 2 years ago
- Linux Kernel Hacking☆776Apr 10, 2024Updated 2 years ago
- Repo of RIT CCDC Team Scripts☆13Mar 28, 2022Updated 4 years ago
- ☆125May 12, 2021Updated 5 years ago
- LKM Linux rootkit☆2,747Aug 17, 2026Updated 2 months ago