milabs/kopycat external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

milabs/kopycat

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/milabs/kopycat)

Close

milabs / kopycatView on GitHubMore

• External links
• Readme badge

Linux Kernel module-less implant (backdoor)

☆73Mar 11, 2021Updated 4 years ago

Alternatives and similar repositories for kopycat

Users that are interested in kopycat are comparing it to the libraries listed below

• milabs / kjector

  View on GitHub
  Code injection from Linux kernel to a process
  ☆24May 19, 2023Updated 2 years ago
• zimnyaa / beepsyscall

  View on GitHub
  An adaptation of timwhitez's proxycall that uses kernelbase.dll!Beep.
  ☆16Nov 1, 2023Updated 2 years ago
• killvxk / Cisco_ASA_Backdoor

  View on GitHub
  ☆11Jun 4, 2019Updated 6 years ago
• h3xduck / Umbra

  View on GitHub
  A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malwar…
  ☆135Sep 19, 2021Updated 4 years ago
• loneicewolf / EXEC_LKM

  View on GitHub
  A LKM (Loadable Kernel Module) to execute a command as root; I include a example of using netcat and a compiled(with source and steps on…
  ☆16Oct 8, 2024Updated last year
• spiderpig1297 / kfile-over-icmp

  View on GitHub
  kfile-over-icmp is an LKM for stealth sending of files over ICMP communication.
  ☆18Oct 9, 2020Updated 5 years ago
• Error996 / bdvl

  View on GitHub
  bdvl
  ☆117Feb 26, 2022Updated 4 years ago
• reveng007 / reveng_rtkit

  View on GitHub
  Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypa…
  ☆267Dec 6, 2025Updated 2 months ago
• lkmidas / Midas-ELF64-Injector

  View on GitHub
  A tool to inject C code into ELF64 binaries
  ☆29May 25, 2021Updated 4 years ago
• milabs / khook

  View on GitHub
  Linux Kernel hooking engine (x86)
  ☆387Oct 14, 2025Updated 4 months ago
• ricardojba / noPac

  View on GitHub
  CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.
  ☆34Dec 19, 2021Updated 4 years ago
• milabs / awesome-linux-rootkits

  View on GitHub
  awesome-linux-rootkits
  ☆2,032Feb 15, 2026Updated 2 weeks ago
• 0xchase / modality

  View on GitHub
  Symbolic execution in radare2 with angr
  ☆39Jul 27, 2021Updated 4 years ago
• trustedsec / Windows-MS-LSAT-RPC-Example

  View on GitHub
  Windows RPC example calling stubs generated from MS-LSAT and MS-LSAD
  ☆28Jan 4, 2024Updated 2 years ago
• CyberSecurityExploitDevelopment / SMBLibrary

  View on GitHub
  Windows CIFS/SMB packet generation and SMB networking library
  ☆12Aug 25, 2020Updated 5 years ago
• radareorg / radare2-rlang

  View on GitHub
  Writing Radare2 plugins in various languages
  ☆18Sep 22, 2025Updated 5 months ago
• mav8557 / Father

  View on GitHub
  LD_PRELOAD rootkit
  ☆139Feb 29, 2024Updated 2 years ago
• sourceincite / CVE-2021-24085

  View on GitHub
  ☆71Feb 15, 2021Updated 5 years ago
• carloslack / KoviD

  View on GitHub
  Red-Team LKM
  ☆637Dec 16, 2025Updated 2 months ago
• redcode-labs / Solaris

  View on GitHub
  A local LKM rootkit loader/dropper that lists available security mechanisms
  ☆52Sep 4, 2021Updated 4 years ago
• R3tr074 / brokepkg

  View on GitHub
  The LKM rootkit working in Linux Kernels 2.6.x/3.x/4.x/5.x
  ☆132Aug 8, 2023Updated 2 years ago
• netspooky / b64mute

  View on GitHub
  Base64 Mutator
  ☆13Feb 13, 2021Updated 5 years ago
• needle-wang / jweevely

  View on GitHub
  a exec jsp shell, simply like weevely php C/S shell.
  ☆14Jun 21, 2022Updated 3 years ago
• berthubert / sbox

  View on GitHub
  sandbox demo
  ☆11Jan 18, 2024Updated 2 years ago
• loland / inlineExecute

  View on GitHub
  Cobalt Strike BOF
  ☆42Dec 10, 2025Updated 2 months ago
• chumachok / cat-soup

  View on GitHub
  ebpf covert channel rootkit
  ☆15Feb 6, 2024Updated 2 years ago
• linuxthor / rkbreaker

  View on GitHub
  Rootkit breaker - experimental Linux anti-rootkit tool based on kprobes
  ☆12Sep 30, 2020Updated 5 years ago
• kkent030315 / razy_importer

  View on GitHub
  Rust implementation of lazy_importer
  ☆59Aug 3, 2023Updated 2 years ago
• linuxthor / rkspotter

  View on GitHub
  Rootkit spotter - experimental Linux rootkit finder LKM
  ☆30Oct 11, 2020Updated 5 years ago
• bootkitsbook / bootkits.io

  View on GitHub
  ☆14May 19, 2019Updated 6 years ago
• nimrodpar / Crawl-Labeled-PE

  View on GitHub
  Crawl (~600K) labeled Portable Exe files from Microsoft Cabs
  ☆14Jul 31, 2021Updated 4 years ago
• melodyasper / dracula_ghidra

  View on GitHub
  Dracula inspired theme for Ghidra
  ☆12Dec 3, 2019Updated 6 years ago
• Terraminator / kirito

  View on GitHub
  rootkit for tryhackme king of the hill
  ☆12Apr 7, 2024Updated last year
• guitmz / go-liora

  View on GitHub
  Probably the first binary (PE/ELF) infector ever created in GoLang.
  ☆50May 12, 2022Updated 3 years ago
• guttir14 / Unpacker

  View on GitHub
  ☆12Jan 11, 2022Updated 4 years ago
• KosBeg / ctf-writeups

  View on GitHub
  My ctf-writeups
  ☆12Jan 28, 2019Updated 7 years ago
• kargisimos / dolus

  View on GitHub
  x86_64 LKM linux rootkit
  ☆16Jul 1, 2023Updated 2 years ago
• waleedassar / SyscallNumberFinder

  View on GitHub
  ☆33Sep 24, 2021Updated 4 years ago
• bootkitsbook / fwimplants

  View on GitHub
  ☆35Mar 20, 2021Updated 4 years ago