milabs / kjectorLinks
Code injection from Linux kernel to a process
☆24Updated 2 years ago
Alternatives and similar repositories for kjector
Users that are interested in kjector are comparing it to the libraries listed below
Sorting:
- An example of hijacking the dynamic linker with a custom interpreter who loads and executes modular viruses☆66Updated 3 years ago
- Linux Kernel module-less implant (backdoor)☆73Updated 4 years ago
- In line function hooking LKM rootkit☆52Updated 5 years ago
- Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)☆73Updated 2 years ago
- Evasive ELF Static PIE User-Land-Exec featured in Tmpout Vol 1.☆28Updated 4 years ago
- yet another hidden LKM hunter☆29Updated 4 months ago
- Rootkit spotter - experimental Linux rootkit finder LKM☆30Updated 5 years ago
- Abusing exceptions for code execution.☆113Updated 3 years ago
- Report and exploit of CVE-2023-36427☆90Updated 2 years ago
- Kernel Read Write Execute☆84Updated last year
- A Linux x86/x86-64 tool to trace registers and memory regions.☆40Updated 3 years ago
- call gates as stable comunication channel for NT x86 and Linux x86_64☆32Updated 2 years ago
- Matryoshka - stacked LKM loader☆54Updated 2 years ago
- PoC code of Shade BIOS (stripped) presented at Black Hat USA 2025☆60Updated 6 months ago
- One Bootloader to Load Them All - Research materials, Code , Etc.☆63Updated 3 years ago
- Neutralize KEPServerEX anti-debugging techniques☆33Updated 2 years ago
- Exploit POC for CVE-2024-36877☆48Updated last year
- Michelangelo REanimator bootkit and REcon 2023 talk slides/materials☆30Updated last year
- Simple PoC for a bootkit written as a UEFI Option ROM Driver☆11Updated 3 years ago
- Slides from various conference talks☆37Updated 2 years ago
- An ELF / PE binary packer written in pure C, made for fun☆107Updated last year
- Unlicensed tiny / small portable implementation of 128/256-bit AES encryption in C, x86, AMD64, ARM32, ARM64 and LoongArch64 assembly☆134Updated last week
- Linux kernel LPE practice with an NPD vulnerability☆36Updated 2 years ago
- NASM Linux x86_64 pure (no deps) shared library (.so), POC for Reflective ELF SO injection☆31Updated 2 years ago
- Binary Ninja plugin to perform automated analysis of Windows drivers☆20Updated 6 years ago
- kunkillable is an LKM that makes userland processes unkillable.☆16Updated 5 years ago
- rp-bf: A library to bruteforce ROP gadgets by emulating a Windows user-mode crash-dump☆121Updated last year
- NT AUTHORITY\SYSTEM☆43Updated 5 years ago
- Obfuscat is a tool and framework for obfuscation with predictable size and runtime overhead.☆38Updated 2 years ago
- hypervisor enforced patch protection for the linux kernel with xen + libvmi, libvmi KASLR offset spoofer☆34Updated last year