Alternatives and similar repositories for DrawBridge

Users that are interested in DrawBridge are comparing it to the libraries listed below

• Iansus / hideproc-lkm
  Linux 4.9 Loadable Kernel Module to hide processes from system utilities
  ☆67Updated 6 years ago
• ForensicITGuy / libpreloadvaccine
  Whitelisting LD_PRELOAD libraries using LD_AUDIT
  ☆63Updated 3 years ago
• nccgroup / ebpf
  eBPF - extended Berkeley Packet Filter tooling
  ☆122Updated 3 years ago
• therealdreg / lsrootkit
  Rootkit Detector for UNIX
  ☆61Updated last year
• brl / grlh
  ☆92Updated 7 years ago
• WhiteBeamSec / WhiteBeam
  WhiteBeam: Transparent endpoint security
  ☆101Updated 2 years ago
• Gui774ume / ebpfkit-monitor
  ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
  ☆132Updated 2 years ago
• QuokkaLight / rkduck
  Linux v4.x.x Rootkit
  ☆90Updated 10 months ago
• stealth / psc
  E2E encryption for multi-hop tty sessions or portshells + TCP/UDP port forward
  ☆122Updated 7 months ago
• elfmaster / saruman
  ELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection)
  ☆135Updated 7 years ago
• xpn / ssh-inject
  A ptrace POC by hooking SSH to reveal provided passwords
  ☆182Updated 8 years ago
• emptymonkey / mimic
  Hide processes as a normal user in Linux.
  ☆258Updated 11 months ago
• xairy / unlockdown
  Disabling kernel lockdown on Ubuntu without physical access
  ☆79Updated 2 years ago
• emptymonkey / shelljack
  A keystroke / terminal logger for Linux.
  ☆216Updated 11 months ago
• geyslan / SLAE
  SLAE Assignments
  ☆39Updated last year
• maK- / reverse-shell-access-kernel-module
  This is a kernel module invoked reverse shell proof of concept.
  ☆72Updated 5 years ago
• guitmz / memrun
  Small tool to run ELF binaries from memory with a given process name
  ☆167Updated 3 years ago
• brainsmoke / ptrace-burrito
  a friendly wrapper around ptrace
  ☆132Updated 3 years ago
• nbulischeck / tyton
  Kernel-Mode Rootkit Hunter
  ☆369Updated 3 years ago
• milabs / stamina
  (Linux Kernel) Stack Monitoring Tool
  ☆45Updated 3 years ago
• chokepoint / Jynx2
  JynxKit2 is an LD_PRELOAD userland rootkit based on the original JynxKit. The backdoor has been replaced with an "accept()" system hook.
  ☆173Updated 12 years ago
• dsnezhkov / zombieant
  Zombie Ant Farm: Primitives and Offensive Tooling for Linux EDR evasion.
  ☆225Updated 5 years ago
• chokepoint / CryptHook
  TCP/UDP symmetric encryption tunnel wrapper
  ☆120Updated 4 years ago
• taviso / scanlimits
  Tool to examine the behaviour of setuid binaries under constrained limits.
  ☆61Updated 4 years ago
• bcdannyboy / Research
  General Research Repository - Only updated when I feel like it
  ☆28Updated 8 months ago
• audibleblink / gorsh
  A toy CTF Golang Reverse Shell w/ a Tmux-driven psuedo-C2 Interface
  ☆88Updated 2 months ago
• Gui774ume / ssh-probe
  monitor and protect SSH sessions with eBPF
  ☆69Updated 3 years ago
• SafeBreach-Labs / AltFS
  The Alternative Fileless File System
  ☆57Updated 6 years ago
• stealth / fraud-bridge
  ICMP and DNS tunneling via IPv4 and IPv6
  ☆207Updated 2 months ago
• out-of-tree / out-of-tree
  out-of-tree kernel {module, exploit} development tool
  ☆228Updated 6 months ago