Alternatives and similar repositories for rooty:

Users that are interested in rooty are comparing it to the libraries listed below

• mav8557 / Father
  LD_PRELOAD rootkit
  ☆127Updated 10 months ago
• redcode-labs / BMJ
  Code snippets for bare-metal malware development
  ☆97Updated 2 years ago
• shogunlab / building-c2-implants-in-cpp
  The source code files that accompany the short book "Building C2 Implants in C++: A Primer" by Steven Patterson (@shogun_lab).
  ☆225Updated last month
• VoidSec / Exploit-Development
  Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)
  ☆218Updated last year
• reveng007 / reveng_rtkit
  Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypa…
  ☆241Updated last year
• connormcgarr / Kernel-Exploits
  Kernel Exploits
  ☆247Updated 3 years ago
• h3xduck / Umbra
  A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malwar…
  ☆120Updated 3 years ago
• Error996 / bdvl
  bdvl
  ☆111Updated 2 years ago
• sad0p / d0zer
  Elf binary infector written in Go.
  ☆206Updated last week
• uf0o / rootkit-arsenal-guacamole
  An attempt to restore and adapt to modern Win10 version the 'Rootkit Arsenal' original code samples
  ☆68Updated 2 years ago
• SafeBreach-Labs / Back2TheFuture
  Find patterns of vulnerabilities on Windows in order to find 0-day and write exploits of 1-days. We use Microsoft security updates in ord…
  ☆178Updated 3 years ago
• realoriginal / bootlicker
  A generic UEFI bootkit used to achieve initial usermode execution. It works with modifications.
  ☆406Updated last year
• c0de90e7 / GhostWriting
  GhostWriting Injection Technique.
  ☆166Updated 6 years ago
• W3ndige / linux-process-injection
  Proof of concept for injecting simple shellcode via ptrace into a running process.
  ☆63Updated 2 years ago
• am0nsec / vx
  Virus Exchange (VX) - Collection of malware or assembly code used for "offensive" purposed.
  ☆178Updated 2 years ago
• carloslack / KoviD
  Linux kernel rootkit
  ☆307Updated this week
• lcashdol / UPX
  A utility to fix intentionally corrupted UPX packed files.
  ☆82Updated last year
• zerosum0x0-archive / archive
  ☆54Updated 3 years ago
• R3x / linux-rootkits
  A collection of Linux kernel rootkits found across the internet taken and put together
  ☆74Updated 2 years ago
• ByteHackr / WindowsExploitation
  A curated list of awesome Windows Exploitation resources, and shiny things.
  ☆71Updated 7 years ago
• BishopFox / asminject
  Heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly (or precompiled binary) payloads directly into x86…
  ☆119Updated 2 years ago
• binderlabs / DirCreate2System
  Weaponizing to get NT SYSTEM for Privileged Directory Creation Bugs with Windows Error Reporting
  ☆359Updated 2 years ago
• Bw3ll / ROP_ROCKET
  ROP ROCKET is an advanced code-reuse attack framework, with extensive ROP chain generation capabilities, including for novel Windows Sysc…
  ☆115Updated 4 months ago
• hasherezade / process_overwriting
  Yet another variant of Process Hollowing
  ☆357Updated 10 months ago
• milabs / kopycat
  Linux Kernel module-less implant (backdoor)
  ☆68Updated 3 years ago
• yardenshafir / IoRingReadWritePrimitive
  Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2
  ☆224Updated 2 years ago
• forrest-orr / Exploits
  A personal collection of Windows CVE I have turned in to exploit source, as well as a collection of payloads I've written to be used in c…
  ☆120Updated 2 years ago
• deepinstinct / Dirty-Vanity
  A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.ht…
  ☆627Updated 2 years ago
• Idov31 / Cronos
  PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners.
  ☆572Updated last year