milabs / kjector
Code injection from Linux kernel to a process
☆19Updated last year
Alternatives and similar repositories for kjector:
Users that are interested in kjector are comparing it to the libraries listed below
- call gates as stable comunication channel for NT x86 and Linux x86_64☆31Updated last year
- Evasive ELF Static PIE User-Land-Exec featured in Tmpout Vol 1.☆25Updated 3 years ago
- yet another hidden LKM hunter☆18Updated last year
- An example of hijacking the dynamic linker with a custom interpreter who loads and executes modular viruses☆62Updated 2 years ago
- Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)☆69Updated last year
- One Bootloader to Load Them All - Research materials, Code , Etc.☆51Updated 2 years ago
- An injector that use PT_LOAD technique☆12Updated 2 years ago
- ☆32Updated last year
- PEIM (UEFI) bootkit targeting OVMF (EDK2)☆33Updated last year
- A few examples of how to trap virtual memory access on Windows.☆27Updated 2 months ago
- NASM Linux x86_64 pure (no deps) shared library (.so), POC for Reflective ELF SO injection☆29Updated last year
- Michelangelo REanimator bootkit and REcon 2023 talk slides/materials☆28Updated 11 months ago
- PyKD DLLs for x86 and x64 platforms☆16Updated last year
- Listing UDP connections with remote address without sniffing.☆30Updated last year
- In line function hooking LKM rootkit☆51Updated 4 years ago
- Linux Kernel module-less implant (backdoor)☆72Updated 3 years ago
- ☆11Updated 2 years ago
- Report and exploit of CVE-2023-36427☆89Updated last year
- Kernel Read Write Execute☆84Updated 5 months ago
- A Linux x86/x86-64 tool to trace registers and memory regions.☆35Updated 2 years ago
- ☆40Updated 3 years ago
- Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement (DSE)☆20Updated 4 years ago
- Breaking Secure Boot with SMM☆40Updated 2 years ago
- GERMY is a Linux Kernel n-day in the N_GSM line discipline☆44Updated 8 months ago
- Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…☆26Updated last year
- BPFDoor Source Code. Originally found from Chinese Threat Actor Red Menshen☆43Updated 2 years ago
- Rootkit spotter - experimental Linux rootkit finder LKM☆27Updated 4 years ago
- Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode☆19Updated last year
- Extract data of TTD trace file to a minidump☆28Updated last year
- Custom instruction length for hex-rays☆17Updated last month