Linux Kernel hooking engine (x86)
☆392Oct 14, 2025Updated 11 months ago
Alternatives and similar repositories for khook
Users that are interested in khook are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Matryoshka - stacked LKM loader☆56Oct 8, 2023Updated 2 years ago
- awesome-linux-rootkits☆2,102Feb 15, 2026Updated 7 months ago
- Code injection from Linux kernel to a process☆23May 19, 2023Updated 3 years ago
- LKM Linux rootkit☆2,728Aug 17, 2026Updated last month
- Using ftrace for function hooking in Linux kernel☆297Mar 21, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Linux Kernel Hacking☆769Apr 10, 2024Updated 2 years ago
- In line function hooking LKM rootkit☆54Mar 5, 2020Updated 6 years ago
- LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)☆2,460Apr 27, 2026Updated 4 months ago
- A small kernel module that can hook arbitrary syscalls on x86_64☆51Oct 12, 2019Updated 6 years ago
- Linux Kernel module-less implant (backdoor)☆73Mar 11, 2021Updated 5 years ago
- Red-Team LKM☆656May 31, 2026Updated 3 months ago
- A LKM rootkit for most newer kernel versions.☆180Sep 17, 2017Updated 9 years ago
- LibZeroEvil & the Research Rootkit project.☆600Dec 1, 2021Updated 4 years ago
- hook or replace arbitary linux/FreeBSD kernel functions in runtime, supporting arm32, arm64, x86, x86_64, riscv, loongarch☆230Jul 5, 2026Updated 2 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Kernel function hooking using exception tables☆28Jun 15, 2018Updated 8 years ago
- A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.☆1,979Apr 7, 2024Updated 2 years ago
- linux rootkit adapted for 2.6 and 3.x☆223Dec 30, 2015Updated 10 years ago
- Kernel mode to user mode so injection☆97Nov 6, 2020Updated 5 years ago
- An LKM rootkit targeting Linux 2.6/3.x on x86(_64), and ARM☆685Nov 21, 2017Updated 8 years ago
- Rootkit spotter - experimental Linux rootkit finder LKM☆31Oct 11, 2020Updated 5 years ago
- ELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection)☆140Mar 14, 2018Updated 8 years ago
- silent syscall hooking without modifying sys_call_table/handlers via patching exception handler☆154Apr 22, 2024Updated 2 years ago
- Dectect syscall hooking using eBPF☆170Apr 28, 2023Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypa…☆272Dec 6, 2025Updated 9 months ago
- Linux rootkit for Ubuntu 16.04 and 10.04 (Linux Kernels 4.4.0 and 2.6.32), both i386 and amd64☆826Apr 7, 2024Updated 2 years ago
- ebpfkit is a rootkit powered by eBPF☆860Feb 28, 2023Updated 3 years ago
- A stealthy ELF loader - no files, no execve, no RWX☆177Dec 31, 2023Updated 2 years ago
- Library for injecting a shared library into a Linux or Windows process☆617Sep 27, 2025Updated 11 months ago
- AES-encrypted TCP/IP swiss army knife.☆11Nov 6, 2022Updated 3 years ago
- out-of-tree kernel {module, exploit} development tool☆230Dec 2, 2024Updated last year
- ELF Virus infection techniques that work with SCOP (Secure code partitioned) executables☆15May 13, 2019Updated 7 years ago
- A syscall hooking system for FreeBSD, NetBSD and also Linux.☆16Nov 14, 2021Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Linux based inter-process code injection without ptrace(2)☆260Aug 24, 2017Updated 9 years ago
- Kernel-Mode Rootkit Hunter☆370Nov 13, 2021Updated 4 years ago
- Hide processes as a normal user in Linux.☆263Jul 10, 2024Updated 2 years ago
- A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)☆1,819Jun 5, 2026Updated 3 months ago
- Tool for injecting a shared object into a Linux process☆1,235Feb 23, 2022Updated 4 years ago
- LKM rootkit for Linux Kernels 2.6.x/3.x/4.x☆40May 23, 2019Updated 7 years ago
- Ftrace Based Linux Loadable Kernel Module Rootkit for Linux Kernel 5.x up to linux kernel 6.2 on x86_64, hides files, hides process, hide…☆41May 14, 2026Updated 4 months ago