nisay759/linux-rootkits external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

nisay759/linux-rootkits

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/nisay759/linux-rootkits)

Close

nisay759 / linux-rootkitsView on GitHubMore

• External links
• Readme badge

My little precious collection of Linux 4.x kernel rootkits

☆28Jul 27, 2024Updated last year

Alternatives and similar repositories for linux-rootkits

Users that are interested in linux-rootkits are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• droberson / ELFappend

  View on GitHub
  PoC to append and extract data at the end of an ELF file
  ☆20Aug 20, 2017Updated 8 years ago
• Darkabode / 0lib

  View on GitHub
  Zerokit shared code
  ☆17Mar 28, 2019Updated 6 years ago
• voidvxvi / EnableAllTokenPrivs

  View on GitHub
  Enable or Disable TokenPrivilege(s)
  ☆15May 17, 2024Updated last year
• bytecode77 / enter-product-key-privilege-escalation

  View on GitHub
  Enter Product Key Volatile Environment LPE
  ☆13Jun 28, 2025Updated 8 months ago
• bytecode77 / sysprep-privilege-escalation

  View on GitHub
  Sysprep Volatile Environment LPE (2017)
  ☆16Jun 28, 2025Updated 8 months ago
• bytecode77 / taskmgr-privilege-escalation

  View on GitHub
  TaskMgr Volatile Environment LPE
  ☆16Jun 28, 2025Updated 8 months ago
• asuar078 / raisin

  View on GitHub
  Reverse shell and rootkit
  ☆19Apr 28, 2017Updated 8 years ago
• MaXaMaR / kuznezhik

  View on GitHub
  Implementation of Kuznechik cipher Russian standard GOST R 3412-2015 - 128 bit block size / 256 bit key - 8,16, 32, 64, 128-bit x86 versi…
  ☆10Jun 27, 2016Updated 9 years ago
• MythicAgents / leviathan

  View on GitHub
  ☆22Dec 30, 2025Updated 2 months ago
• MythicAgents / scarecrow_wrapper

  View on GitHub
  ☆22Jun 9, 2025Updated 9 months ago
• bytecode77 / performance-monitor-privilege-escalation

  View on GitHub
  Performance Monitor Volatile Environment LPE
  ☆18Jun 28, 2025Updated 8 months ago
• MythicAgents / nemesis

  View on GitHub
  Nemesis agent for Mythic
  ☆28Dec 11, 2025Updated 3 months ago
• PositiveTechnologies / libfptu

  View on GitHub
  One of the fastest binary format for JSON-like data.
  ☆12Dec 13, 2021Updated 4 years ago
• nyxgeek / bad_guest

  View on GitHub
  ☆15Jun 27, 2024Updated last year
• MythicAgents / bloodhound

  View on GitHub
  Bloodhound agent for Mythic
  ☆23Apr 19, 2025Updated 11 months ago
• hashpwn / rules

  View on GitHub
  Top hashpwn rules
  ☆20Dec 12, 2025Updated 3 months ago
• sajith / mod-rootme

  View on GitHub
  Ye olde root shell for ye olde httpd
  ☆44Apr 3, 2015Updated 10 years ago
• CyberSecurityN00b / shellfeck

  View on GitHub
  A BrainF*ck Inspired Shell Obfuscation Proof-of-Concept
  ☆16Mar 11, 2024Updated 2 years ago
• Unit-259 / powerGallery

  View on GitHub
  ☆26Mar 11, 2025Updated last year
• XShar / rootkit_for_linux_kernel_5

  View on GitHub
  Пример руткита для ядра линукс 5
  ☆19Dec 4, 2020Updated 5 years ago
• QuokkaLight / rkduck

  View on GitHub
  Linux v4.x.x Rootkit
  ☆92Jul 27, 2024Updated last year
• luceracloud / seqtest

  View on GitHub
  ☆20Mar 3, 2016Updated 10 years ago
• dsmatter / brootus

  View on GitHub
  An educational Linux Kernel Rootkit
  ☆33Oct 3, 2021Updated 4 years ago
• NexusBots / Umbreon-Rootkit

  View on GitHub
  ☆63Nov 15, 2016Updated 9 years ago
• kozmer / rspy

  View on GitHub
  rust port of pspy with support for process monitoring over dbus
  ☆37Jan 4, 2026Updated 2 months ago
• 649 / EQGRP-Warez

  View on GitHub
  The ORIGINAL decrypted copies of the Shadow Broker's Don't Forget Your Base release. Contains Equation group's collection of tools primar…
  ☆18Jan 29, 2018Updated 8 years ago
• eurecom-s3 / mmushell

  View on GitHub
  ☆14Jul 3, 2024Updated last year
• vin01 / poc-proxycommand-vulnerable-v2

  View on GitHub
  Proof of conept to exploit vulnerable proxycommand configurations on ssh clients
  ☆19Dec 21, 2023Updated 2 years ago
• DNS-OARC / bad-packets

  View on GitHub
  Moved to https://codeberg.org/DNS-OARC/bad-packets
  ☆19Feb 4, 2026Updated last month
• FuzzySecurity / SharpSploit

  View on GitHub
  SharpSploit is a .NET post-exploitation library written in C#
  ☆16Apr 6, 2020Updated 5 years ago
• hfiref0x / hfiref0x.github.io

  View on GitHub
  ☆12Updated this week
• abhilashsanne / Nunit_CShaprp_CheatSheet

  View on GitHub
  Example implementations of each attribute available in Nunit2 unit Testing Framework using C# .NET.
  ☆15Jun 1, 2018Updated 7 years ago
• Darkabode / amte

  View on GitHub
  Analysis and Modification Tool for Executables
  ☆17Mar 28, 2019Updated 6 years ago
• l4rm4nd / XingDumper

  View on GitHub
  Python 3 script to dump/scrape/extract company employees from XING API
  ☆39Feb 12, 2026Updated last month
• adamhlt / Cave-Finder

  View on GitHub
  Tool to find code cave in PE image (x86 / x64) - Find empty space to place code in PE files
  ☆72Aug 1, 2023Updated 2 years ago
• eversinc33 / UnXorStringsNet

  View on GitHub
  Deobfuscation of XorStringsNet
  ☆14Nov 5, 2024Updated last year
• xpn / malIDP

  View on GitHub
  ☆14Mar 19, 2024Updated 2 years ago
• linuxthor / rkspotter

  View on GitHub
  Rootkit spotter - experimental Linux rootkit finder LKM
  ☆30Oct 11, 2020Updated 5 years ago
• MythicAgents / typhon

  View on GitHub
  Payload designed for targeting Jamf enrolled devices.
  ☆39May 19, 2023Updated 2 years ago