Alternatives and similar repositories for DrawBridge

Users that are interested in DrawBridge are comparing it to the libraries listed below

• Iansus / hideproc-lkm
  Linux 4.9 Loadable Kernel Module to hide processes from system utilities
  ☆67Updated 6 years ago
• ForensicITGuy / libpreloadvaccine
  Whitelisting LD_PRELOAD libraries using LD_AUDIT
  ☆63Updated 3 years ago
• therealdreg / lsrootkit
  Rootkit Detector for UNIX
  ☆61Updated last year
• stealth / fraud-bridge
  ICMP and DNS tunneling via IPv4 and IPv6
  ☆205Updated last month
• guitmz / memrun
  Small tool to run ELF binaries from memory with a given process name
  ☆166Updated 3 years ago
• taviso / scanlimits
  Tool to examine the behaviour of setuid binaries under constrained limits.
  ☆61Updated 4 years ago
• Gui774ume / ebpfkit-monitor
  ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
  ☆131Updated 2 years ago
• elfmaster / dt_infect
  ELF Shared library injector using DT_NEEDED precedence infection. Acts as a permanent LD_PRELOAD
  ☆110Updated 5 years ago
• xpn / ssh-inject
  A ptrace POC by hooking SSH to reveal provided passwords
  ☆181Updated 8 years ago
• stealth / crash
  crypted admin shell: SSH-like strong crypto remote admin shell for Linux, BSD, Android, Solaris and OSX
  ☆194Updated last week
• pathtofile / bpf-pipesnoop
  Example program using eBPF to log data being based in using shell pipes
  ☆41Updated 4 years ago
• bcdannyboy / Research
  General Research Repository - Only updated when I feel like it
  ☆28Updated 6 months ago
• elfmaster / saruman
  ELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection)
  ☆135Updated 7 years ago
• milabs / lkrg-bypass
  LKRG bypass methods
  ☆72Updated 5 years ago
• isdrupter / busybotnet
  Security For Embedeed Systems - One Bin to Rule Them All.
  ☆150Updated 6 years ago
• nccgroup / ebpf
  eBPF - extended Berkeley Packet Filter tooling
  ☆123Updated 2 years ago
• QuokkaLight / rkduck
  Linux v4.x.x Rootkit
  ☆90Updated 9 months ago
• dgoulet / kjackal
  Linux Rootkit Scanner
  ☆88Updated 3 years ago
• stealth / psc
  E2E encryption for multi-hop tty sessions or portshells + TCP/UDP port forward
  ☆121Updated 6 months ago
• audibleblink / gorsh
  A toy CTF Golang Reverse Shell w/ a Tmux-driven psuedo-C2 Interface
  ☆87Updated last month
• kkamagui / shadow-box-for-x86
  Shadow-Box: Lightweight and Practical Kernel Protector for x86 (Presented at BlackHat Asia 2017/2018, beVX 2018 and HITBSecConf 2017)
  ☆185Updated 5 years ago
• milabs / stamina
  (Linux Kernel) Stack Monitoring Tool
  ☆45Updated 3 years ago
• spiderpig1297 / kprochide
  kprochide is an LKM for hiding processes from the userland. The module is able to hide multiple processes and is able to dynamically rece…
  ☆21Updated 4 years ago
• netspooky / pdiff
  Binary Protocol Differ
  ☆118Updated 4 years ago
• brl / grlh
  ☆92Updated 7 years ago
• rootfoo / rootkit
  Fully functional but simplified Linux Kernel Module (LKM) Rootkit for educational purposes
  ☆61Updated 6 years ago
• TarlogicSecurity / SaSSHimi
  SSH Tunnelling in "RAW mode", via STDIN/OUT without using forwarding channels
  ☆109Updated 6 years ago
• scumjr / the-sea-watcher
  Implementation of the SMM rootkit "The Watcher"
  ☆126Updated 3 years ago
• xairy / unlockdown
  Disabling kernel lockdown on Ubuntu without physical access
  ☆79Updated 2 years ago
• isc-projects / dnsgen
  DNS packet generator
  ☆46Updated 9 months ago