Alternatives and similar repositories for kmatryoshka

Users that are interested in kmatryoshka are comparing it to the libraries listed below

• milabs / khook

  View on GitHub
  Linux Kernel hooking engine (x86)
  ☆387Oct 14, 2025Updated 4 months ago
• milabs / kjector

  View on GitHub
  Code injection from Linux kernel to a process
  ☆24May 19, 2023Updated 2 years ago
• HFaeiro / Remote-Admin-Tool

  View on GitHub
  Simple remote administration tool. Written in c++ and MASM.
  ☆18May 16, 2018Updated 7 years ago
• zionlion67 / rootkit

  View on GitHub
  Linux kernel module that provides remote backdoor using netfilters , file and pid hiding.
  ☆11Apr 1, 2017Updated 8 years ago
• connormcgarr / Shellcode

  View on GitHub
  Various shellcodes
  ☆13Sep 1, 2020Updated 5 years ago
• basharbachir / HostingCLR-Bypass-AMSI-Windows-Defender

  View on GitHub
  ☆11Apr 23, 2019Updated 6 years ago
• keowu / winsystemprogramming

  View on GitHub
  Learn Winapi in this Repo with examples, to understand its abstraction in reverse engineering for Windows.
  ☆11Aug 8, 2022Updated 3 years ago
• xcellerator / xcellerator.github.io

  View on GitHub
  ☆14Sep 23, 2023Updated 2 years ago
• RalfHacker / ExchangeCheckPack

  View on GitHub
  ☆10Jun 26, 2024Updated last year
• bluedragonsecurity / bds_lkm_ftrace

  View on GitHub
  Ftrace Based Linux Loadable Kernel Module Rootkit for Linux Kernel 5.x up to linux kernel 6.2 on x86_64, hides files, hides process, hide…
  ☆28Feb 4, 2026Updated last week
• vyrus001 / needle

  View on GitHub
  Shellcode process injector
  ☆28May 22, 2020Updated 5 years ago
• ajgb / crypt-curve25519

  View on GitHub
  Crypt::Curve25519
  ☆12Jan 6, 2021Updated 5 years ago
• TheWover / AsyncRAT-VB.NET

  View on GitHub
  Remote Administration Tool For Windows VB.NET
  ☆12Mar 19, 2019Updated 6 years ago
• Baron-von-Riedesel / WinInc

  View on GitHub
  Windows 32/64-bit Include files and Import Libraries
  ☆16May 26, 2022Updated 3 years ago
• kargisimos / dolus

  View on GitHub
  x86_64 LKM linux rootkit
  ☆16Jul 1, 2023Updated 2 years ago
• ioncodes / pooldump

  View on GitHub
  ☆31Jan 12, 2022Updated 4 years ago
• montysecurity / malware-bazaar-advanced-search

  View on GitHub
  Script to chain search parameters for MalwareBazaar
  ☆12Jan 26, 2025Updated last year
• Criper98 / DOSrat

  View on GitHub
  DOSrat by Criper98 ~ Un Remote Administrator Tool in ITA per Windows
  ☆10Oct 14, 2022Updated 3 years ago
• TheIrwin / 2G_3G

  View on GitHub
  StingRay / IMSI Catcher Detector
  ☆12Sep 18, 2018Updated 7 years ago
• shantanu561993 / ParentProcessIDSpoof

  View on GitHub
  Spoof parent process ID
  ☆13Jan 23, 2019Updated 7 years ago
• therealdreg / emuhookdetector

  View on GitHub
  hook detector using emulation and comparing static with dynamic outputs
  ☆17Aug 11, 2023Updated 2 years ago
• ioncodes / BlueGate

  View on GitHub
  PoC for the Remote Desktop Gateway vulnerability - CVE-2020-0609 & CVE-2020-0610
  ☆78Jan 31, 2020Updated 6 years ago
• NYAN-x-CAT / Lime-Dropper

  View on GitHub
  Download payload to disk and install it to startup then melt.
  ☆35Apr 9, 2019Updated 6 years ago
• otavioarj / SIOCTLBF

  View on GitHub
  Super IOCTL Basic Fuzzer
  ☆15Sep 22, 2019Updated 6 years ago
• AzRunRCE / CppHostCLR

  View on GitHub
  C++ Host .NET CLR & Run a assembly directly from ressource (RT_RCDATA) without extraction disk.
  ☆15Mar 18, 2023Updated 2 years ago
• milabs / kiddy

  View on GitHub
  Kiddy - (linux) kernel identity spoofer
  ☆15Mar 18, 2024Updated last year
• augustgl / fruitkit

  View on GitHub
  Simple little rootkit made in C
  ☆13Feb 15, 2021Updated 4 years ago
• doar-e / doar-e.github.io

  View on GitHub
  Diary of a reverse-engineer blog
  ☆20Oct 2, 2023Updated 2 years ago
• alfarom256 / MCP-PoC

  View on GitHub
  Minifilter Callback Patching Proof-of-Concept
  ☆73Oct 31, 2022Updated 3 years ago
• elfmaster / dsym_obfuscate

  View on GitHub
  Obfuscates dynamic symbol table
  ☆135Jan 10, 2019Updated 7 years ago
• CSLDepend / exploits

  View on GitHub
  We store attacks and exploits that we've found useful in our research
  ☆13Jun 4, 2015Updated 10 years ago
• jam620 / Sophos-Vulnerability

  View on GitHub
  CVE-2022-1040
  ☆17Sep 25, 2022Updated 3 years ago
• alfarom256 / MinifilterResearch

  View on GitHub
  ☆16Oct 31, 2022Updated 3 years ago
• S1lkys / CVE-2023-30367-mRemoteNG-password-dumper

  View on GitHub
  Original PoC for CVE-2023-30367
  ☆16Jan 4, 2024Updated 2 years ago
• mgeeky / HEVD_Kernel_Exploit

  View on GitHub
  Exploits pack for the Windows Kernel mode driver HackSysExtremeVulnerableDriver written for educational purposes.
  ☆66Oct 24, 2021Updated 4 years ago
• Allevon412 / ClassicAPIUnhooking

  View on GitHub
  ☆16Nov 23, 2021Updated 4 years ago
• Hildaboo / NotPetyaFileEncryptor

  View on GitHub
  Decompiled NotPetya File Encryptor Code
  ☆17Aug 23, 2022Updated 3 years ago
• h2hconference / 2018

  View on GitHub
  H2HC 2018 Slides/Materials/Presentations
  ☆36Nov 24, 2020Updated 5 years ago
• guitmz / ezuri

  View on GitHub
  A Simple Linux ELF Runtime Crypter
  ☆270Feb 25, 2025Updated 11 months ago