Alternatives and similar repositories for rooty:

Users that are interested in rooty are comparing it to the libraries listed below

• shogunlab / building-c2-implants-in-cpp
  The source code files that accompany the short book "Building C2 Implants in C++: A Primer" by Steven Patterson (@shogun_lab).
  ☆226Updated 2 months ago
• mav8557 / Father
  LD_PRELOAD rootkit
  ☆128Updated 11 months ago
• VoidSec / Exploit-Development
  Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)
  ☆220Updated last year
• redcode-labs / BMJ
  Code snippets for bare-metal malware development
  ☆97Updated 2 years ago
• h3xduck / Umbra
  A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malwar…
  ☆122Updated 3 years ago
• connormcgarr / Kernel-Exploits
  Kernel Exploits
  ☆247Updated 3 years ago
• W3ndige / linux-process-injection
  Proof of concept for injecting simple shellcode via ptrace into a running process.
  ☆64Updated 2 years ago
• reveng007 / reveng_rtkit
  Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypa…
  ☆242Updated last year
• Error996 / bdvl
  bdvl
  ☆112Updated 2 years ago
• c0de90e7 / GhostWriting
  GhostWriting Injection Technique.
  ☆166Updated 6 years ago
• sad0p / d0zer
  Elf binary infector written in Go.
  ☆206Updated last month
• uf0o / rootkit-arsenal-guacamole
  An attempt to restore and adapt to modern Win10 version the 'Rootkit Arsenal' original code samples
  ☆68Updated 2 years ago
• aaaddress1 / Skrull
  Skrull is a malware DRM, that prevents Automatic Sample Submission by AV/EDR and Signature Scanning from Kernel. It generates launchers t…
  ☆453Updated 3 years ago
• SafeBreach-Labs / Back2TheFuture
  Find patterns of vulnerabilities on Windows in order to find 0-day and write exploits of 1-days. We use Microsoft security updates in ord…
  ☆179Updated 3 years ago
• carloslack / KoviD
  Linux kernel rootkit
  ☆327Updated 2 weeks ago
• kymb0 / Malware_learns
  ☆129Updated last year
• dalvarezperez / CreateFile_based_rootkit
  ☆131Updated last year
• waleedassar / RestrictedKernelLeaks
  ☆157Updated 3 years ago
• hasherezade / process_overwriting
  Yet another variant of Process Hollowing
  ☆376Updated 3 weeks ago
• D4stiny / ExceptionOrientedProgramming
  Abusing exceptions for code execution.
  ☆109Updated 2 years ago
• compilepeace / EVIL_RABBIT
  -x-x-x- DO NOT RUN ON PRODUCTION MACHINE -x-x-x- LD_PRELOAD based user-land rootkit for Linux platform.
  ☆27Updated 4 years ago
• waldo-irc / MalMemDetect
  Detect strange memory regions and DLLs
  ☆177Updated 3 years ago
• R3x / linux-rootkits
  A collection of Linux kernel rootkits found across the internet taken and put together
  ☆73Updated 2 years ago
• am0nsec / vx
  Virus Exchange (VX) - Collection of malware or assembly code used for "offensive" purposed.
  ☆179Updated 3 years ago
• Bw3ll / ROP_ROCKET
  ROP ROCKET is an advanced code-reuse attack framework, with extensive ROP chain generation capabilities, including for novel Windows Sysc…
  ☆115Updated 5 months ago
• milabs / kmatryoshka
  Matryoshka - stacked LKM loader
  ☆50Updated last year
• ByteHackr / WindowsExploitation
  A curated list of awesome Windows Exploitation resources, and shiny things.
  ☆72Updated 7 years ago
• NullArray / WinKernel-Resources
  A list of excellent resources for anyone to deepen their understanding with regards to Windows Kernel Exploitation and general low level …
  ☆135Updated 2 years ago
• hasherezade / masm_shc
  A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.
  ☆160Updated 2 months ago
• JLospinoso / cpp-implant
  A simple implant showcasing modern C++
  ☆104Updated 4 years ago