LD_PRELOAD rootkit
☆145Feb 29, 2024Updated 2 years ago
Alternatives and similar repositories for Father
Users that are interested in Father are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Very Easy Relative Backdoor Application☆14Jun 8, 2021Updated 5 years ago
- A Flask-based HTTP(S) command and control (C2) with a web frontend. Malleable agent written in Go.☆37Aug 12, 2023Updated 3 years ago
- Basic Linux binary shim method on the passwd binary from the shadow package to steal credentials as they are changed.☆14Nov 14, 2024Updated last year
- LD_PRELOAD Rootkit☆342Apr 5, 2025Updated last year
- Raw socket library/framework for red team events☆34Feb 25, 2023Updated 3 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malwar…☆138Sep 19, 2021Updated 5 years ago
- Linux Kernel Module Rootkit with module hiding, RCE/reverse shell, and persistence capabilities☆15Feb 23, 2023Updated 3 years ago
- Winlogon and LSA Notification Password Filters☆19Jul 11, 2023Updated 3 years ago
- Windows NTLM Authentication Backdoor☆18Jan 27, 2022Updated 4 years ago
- In line function hooking LKM rootkit☆54Mar 5, 2020Updated 6 years ago
- Resources I've found helpful for learning computing security.☆14Dec 26, 2019Updated 6 years ago
- A tool is designed to streamline the process of interacting with virtual cybersecurity competition environments.☆13Oct 24, 2025Updated last year
- Windows NTLM Authentication Backdoor☆241Jan 15, 2025Updated last year
- The long shadow to emerge as other Git repositories☆18Feb 25, 2026Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Python CLI and module for CIRCL hash lookup☆14Jul 9, 2025Updated last year
- ☆12Jun 22, 2022Updated 4 years ago
- Monitor malware scanning services for your payloads☆11Jun 24, 2021Updated 5 years ago
- Cross-platform RAT, written in C☆89Oct 8, 2022Updated 4 years ago
- autopwn + deployment☆15Apr 13, 2022Updated 4 years ago
- LD_PRELOAD rootkit☆24Oct 12, 2014Updated 12 years ago
- The home to the popular script named Voidware☆18Feb 10, 2025Updated last year
- ld_preload userland rootkit☆36Dec 13, 2020Updated 5 years ago
- C2 + Implant with protobuf based communication with focus on being quiet.☆11Nov 3, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.☆1,992Apr 7, 2024Updated 2 years ago
- Discover DYLD_INSERT_LIBRARIES hijacks on macOS☆45Sep 15, 2022Updated 4 years ago
- A collection of resources that I've used to learn things☆15Aug 31, 2021Updated 5 years ago
- Windows Reverse TCP Shell for Hacking and Pentesting☆25Aug 13, 2024Updated 2 years ago
- Probably the easiest way to setup new beacon notifications in Cobalt Strike☆10Jan 7, 2022Updated 4 years ago
- Command and Control that uses NTP as the transport protocol.☆26Jan 29, 2022Updated 4 years ago
- A security competition scoring system built on the Elastic stack.☆41Dec 11, 2025Updated 10 months ago
- Grab Firefox post requests by hooking PR_Write function from nss3.dll module using trampoline hook to get passwords and emails of users☆41Oct 5, 2022Updated 4 years ago
- Discord C2 for Redteam....Need a better name☆145May 7, 2023Updated 3 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A C2 post-exploitation framework☆486Jan 24, 2024Updated 2 years ago
- Linux Loadable Kernel Module Rootkit for Linux Kernel 5.x up to linux kernel 6.8 on x86_64, hides files, hides process, hides bind shell …☆21Feb 15, 2026Updated 8 months ago
- A LKM (Loadable Kernel Module) to execute a command as root; I include a example of using netcat and a compiled(with source and steps on…☆18Oct 8, 2024Updated 2 years ago
- bdvl☆119Feb 26, 2022Updated 4 years ago
- Hide process,port,self under Linux using the ld_preload☆176Nov 18, 2021Updated 4 years ago
- ELF Shared library injector using DT_NEEDED precedence infection. Acts as a permanent LD_PRELOAD☆111Apr 8, 2020Updated 6 years ago
- Red-Team LKM☆663Oct 18, 2026Updated 2 weeks ago