h3xduck / UmbraLinks
A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malware and more.
☆128Updated 3 years ago
Alternatives and similar repositories for Umbra
Users that are interested in Umbra are comparing it to the libraries listed below
Sorting:
- A local LKM rootkit loader/dropper that lists available security mechanisms☆52Updated 3 years ago
- A Flask-based HTTP(S) command and control (C2) with a web frontend. Malleable agent written in Go.☆36Updated 2 years ago
- (Sim)ulate (Ba)zar Loader☆29Updated 4 years ago
- LD_PRELOAD rootkit☆134Updated last year
- This is a simple example of DLL hijacking enabling proxy execution.☆66Updated 2 years ago
- ☆55Updated 3 years ago
- ☆37Updated 5 months ago
- MS Office and Windows HTML RCE (CVE-2023-36884) - PoC and exploit☆41Updated last year
- bdvl☆114Updated 3 years ago
- ☆67Updated 2 years ago
- Evasion Escaper is a project aimed at evading the checks that malicious software performs to detect if it's running in a virtual environm…☆107Updated 6 months ago
- Multi-threaded, multi-os/platform (Linux/Windows) c2 server and Windows reverse TCP shell client both written in C.☆121Updated 3 years ago
- Let's try to create a rootkit!☆20Updated 5 years ago
- -x-x-x- DO NOT RUN ON PRODUCTION MACHINE -x-x-x- LD_PRELOAD based user-land rootkit for Linux platform.☆28Updated 4 years ago
- Recreating and reviewing the Windows persistence methods☆39Updated 3 years ago
- Paracosme is a zero-click remote memory corruption exploit that compromises ICONICS Genesis64 which was demonstrated successfully on stag…☆89Updated last year
- Malware indetectable, with AV bypass techniques, anti-disassembly, etc.☆103Updated 5 years ago
- An evil bit backdoor for iptables☆53Updated 4 years ago
- Understanding WinRAR Code Execution Vulnerability (CVE-2023-38831)☆41Updated last year
- Linux Kernel module-less implant (backdoor)☆74Updated 4 years ago
- Windows internals and exploitation tricks☆103Updated 2 months ago
- Random CVEs☆32Updated 3 months ago
- Dell Driver EoP (CVE-2021-21551)☆32Updated 3 years ago
- Binary to shellcode from an object/executable format 32 & 64-bit PE , ELF☆74Updated 4 years ago
- Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)☆228Updated 2 years ago
- A shellcode generator with encryption, encoding and polymorphism facilities built-in☆33Updated 3 years ago
- An example of hijacking the dynamic linker with a custom interpreter who loads and executes modular viruses☆66Updated 3 years ago
- Injects HTML/PHP/ASP to the PE☆101Updated 5 years ago
- Reverse shell macro using Word VBA☆15Updated 4 years ago
- Embed an executable as a PE resource, drops and launches it in runtime.☆61Updated 3 years ago