awesome-linux-rootkits
☆2,111Feb 15, 2026Updated 8 months ago
Alternatives and similar repositories for awesome-linux-rootkits
Users that are interested in awesome-linux-rootkits are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- LKM Linux rootkit☆2,748Aug 17, 2026Updated 2 months ago
- LKM rootkit for Linux Kernels 2.6.x-6.x (x86/x86_64 and ARM/64)☆2,488Updated this week
- This is the list of all rootkits found so far on github and other sites.☆1,483Aug 29, 2025Updated last year
- A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.☆1,992Apr 7, 2024Updated 2 years ago
- Red-Team LKM☆663Oct 18, 2026Updated 2 weeks ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Linux Kernel hooking engine (x86)☆393Oct 14, 2025Updated last year
- Linux Kernel Hacking☆778Apr 10, 2024Updated 2 years ago
- Linux rootkit for Ubuntu 16.04 and 10.04 (Linux Kernels 4.4.0 and 2.6.32), both i386 and amd64☆831Apr 7, 2024Updated 2 years ago
- Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)☆991Dec 11, 2020Updated 5 years ago
- Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypa…☆273Dec 6, 2025Updated 10 months ago
- a summary of linux rootkits published on GitHub☆199May 7, 2020Updated 6 years ago
- awesome list of browser exploitation tutorials☆2,307Sep 18, 2023Updated 3 years ago
- Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.☆2,208Jul 28, 2026Updated 3 months ago
- A collection of links related to Linux kernel security and exploitation☆6,672Oct 5, 2026Updated 3 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- linux-kernel-exploits Linux平台提权漏洞集合☆5,662Jul 13, 2020Updated 6 years ago
- LibZeroEvil & the Research Rootkit project.☆603Dec 1, 2021Updated 4 years ago
- ebpfkit is a rootkit powered by eBPF☆866Feb 28, 2023Updated 3 years ago
- Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.☆1,684Oct 19, 2023Updated 3 years ago
- Hide a process under Linux using the ld preloader (https://sysdig.com/blog/hiding-linux-processes-for-fun-and-profit/)☆1,138Aug 2, 2019Updated 7 years ago
- Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.☆2,543Sep 26, 2026Updated last month
- Linux-first multi-operator C2 built to stay quiet and keep working. Self-healing mesh with assisted discovery, in-memory execution with e…☆1,803Updated this week
- Academic project of Linux rootkit made for Bachelor Engineering Thesis.☆121Mar 27, 2026Updated 7 months ago
- Adversary Emulation Framework☆12,213Oct 26, 2026Updated last week
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- An LKM rootkit targeting Linux 2.6/3.x on x86(_64), and ARM☆689Nov 21, 2017Updated 8 years ago
- Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.☆5,621Oct 15, 2026Updated 2 weeks ago
- Open-Source Shellcode & PE Packer☆2,144Feb 3, 2024Updated 2 years ago
- A curated list of awesome privilege escalation☆1,622Mar 23, 2026Updated 7 months ago
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆4,744Jul 8, 2025Updated last year
- A collection of links related to VMware escape exploits☆1,492Sep 4, 2024Updated 2 years ago
- A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on…☆5,940Apr 3, 2024Updated 2 years ago
- windows kernel security development☆2,071Sep 6, 2022Updated 4 years ago
- ☆518Nov 21, 2020Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Practice Go programming and implement CobaltStrike's Beacon in Go☆1,266Oct 2, 2020Updated 6 years ago
- Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.☆7,173Jul 1, 2026Updated 4 months ago
- A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29☆711Jul 7, 2024Updated 2 years ago
- Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.☆946Mar 29, 2022Updated 4 years ago
- Rust Weaponization for Red Team Engagements.☆3,033Apr 25, 2024Updated 2 years ago
- A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malwar…☆138Sep 19, 2021Updated 5 years ago
- List of Awesome Advanced Windows Exploitation References☆1,570Jan 13, 2022Updated 4 years ago