LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)
☆2,406Apr 27, 2026Updated 2 months ago
Alternatives and similar repositories for Diamorphine
Users that are interested in Diamorphine are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- awesome-linux-rootkits☆2,073Feb 15, 2026Updated 4 months ago
- An LKM rootkit targeting Linux 2.6/3.x on x86(_64), and ARM☆682Nov 21, 2017Updated 8 years ago
- Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)☆980Dec 11, 2020Updated 5 years ago
- Linux rootkit for Ubuntu 16.04 and 10.04 (Linux Kernels 4.4.0 and 2.6.32), both i386 and amd64☆827Apr 7, 2024Updated 2 years ago
- Red-Team LKM☆650May 31, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.☆1,966Apr 7, 2024Updated 2 years ago
- Linux Kernel Hacking☆768Apr 10, 2024Updated 2 years ago
- A LKM rootkit for most newer kernel versions.☆180Sep 17, 2017Updated 8 years ago
- This is the list of all rootkits found so far on github and other sites.☆1,458Aug 29, 2025Updated 10 months ago
- LibZeroEvil & the Research Rootkit project.☆602Dec 1, 2021Updated 4 years ago
- Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypa…☆272Dec 6, 2025Updated 7 months ago
- BEURK Experimental Unix RootKit☆389Apr 28, 2017Updated 9 years ago
- This is a linux rootkit using many of the techniques described on☆167Oct 22, 2019Updated 6 years ago
- linux rootkit☆162Feb 12, 2018Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Adversary Emulation Framework☆11,461Jun 3, 2026Updated last month
- Hide a process under Linux using the ld preloader (https://sysdig.com/blog/hiding-linux-processes-for-fun-and-profit/)☆1,127Aug 2, 2019Updated 6 years ago
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆4,647Jul 8, 2025Updated 11 months ago
- Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Modular Post‑Exploitation, and OPSEC‑Focused Transport☆1,710Jun 22, 2026Updated 2 weeks ago
- ebpfkit is a rootkit powered by eBPF☆850Feb 28, 2023Updated 3 years ago
- LKM rootkit for Linux x86 with the 2.6 kernel. It inserts salts inside system_call and sysenter_entry.☆86Aug 11, 2023Updated 2 years ago
- Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.☆2,158May 25, 2026Updated last month
- A collection of links related to Linux kernel security and exploitation☆6,516May 29, 2026Updated last month
- Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.☆5,571Apr 17, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Azazel is a userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit. It is more robust and has additional feat…☆806Mar 7, 2024Updated 2 years ago
- Linux v4.x.x Rootkit☆92Jul 27, 2024Updated last year
- Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode☆2,536Nov 15, 2023Updated 2 years ago
- a summary of linux rootkits published on GitHub☆195May 7, 2020Updated 6 years ago
- Linux Kernel hooking engine (x86)☆392Oct 14, 2025Updated 8 months ago
- Defeating Windows User Account Control☆7,670May 22, 2026Updated last month
- Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.☆1,673Oct 19, 2023Updated 2 years ago
- Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C☆8,987Mar 22, 2024Updated 2 years ago
- Converts PE into a shellcode☆2,776Aug 30, 2025Updated 10 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- generate CobaltStrike's cross-platform payload☆2,559Nov 20, 2023Updated 2 years ago
- JynxKit2 is an LD_PRELOAD userland rootkit based on the original JynxKit. The backdoor has been replaced with an "accept()" system hook.☆182Dec 15, 2012Updated 13 years ago
- linux rootkit adapted for 2.6 and 3.x☆225Dec 30, 2015Updated 10 years ago
- The LKM rootkit working in Linux Kernels 2.6.x/3.x/4.x/5.x☆141Aug 8, 2023Updated 2 years ago
- HORSEPILL rootkit PoC☆234Aug 5, 2016Updated 9 years ago
- Open-Source Shellcode & PE Packer☆2,110Feb 3, 2024Updated 2 years ago
- AV/EDR evasion via direct system calls.☆1,817Sep 3, 2022Updated 3 years ago