nisay759 / linux-rootkitsLinks
My little precious collection of Linux 4.x kernel rootkits
☆28Updated last year
Alternatives and similar repositories for linux-rootkits
Users that are interested in linux-rootkits are comparing it to the libraries listed below
Sorting:
- Matryoshka - stacked LKM loader☆54Updated 2 years ago
- ☆63Updated 9 years ago
- Linux v4.x.x Rootkit☆92Updated last year
- ☆28Updated 6 years ago
- ☆16Updated 4 years ago
- Raw socket library/framework for red team events☆33Updated 2 years ago
- A way to backdoor every process☆68Updated 8 years ago
- -x-x-x- DO NOT RUN ON PRODUCTION MACHINE -x-x-x- LD_PRELOAD based user-land rootkit for Linux platform.☆28Updated 5 years ago
- LKM rootkit for Linux x86 with the 2.6 kernel. It inserts salts inside system_call and sysenter_entry.☆87Updated 2 years ago
- Rootkit spotter - experimental Linux rootkit finder LKM☆30Updated 5 years ago
- Fileless persistence, attacks and anti-forensic capabilties.☆92Updated 7 years ago
- Reflective SO injection is a library injection technique in which the concept of reflective programming is employed to perform the loadin…☆117Updated 9 years ago
- A summary about different projects/presentations/tools to test how to evade malware sandbox systems☆55Updated 7 years ago
- Proxy system calls over an RPC channel☆100Updated 3 years ago
- ☆34Updated 10 years ago
- PoC of injecting code into a running Linux process☆23Updated 6 years ago
- ☆62Updated 5 years ago
- Linux 4.9 Loadable Kernel Module to hide processes from system utilities☆67Updated 7 years ago
- ☆117Updated 9 years ago
- Reflective Polymorphism☆109Updated 7 years ago
- In line function hooking LKM rootkit☆52Updated 5 years ago
- A ptrace POC by hooking SSH to reveal provided passwords☆188Updated 8 years ago
- reverse shell with tty emulation, openssl encryption and support for multiple tcp proxies☆28Updated 9 years ago
- ELF packer/crypter that aims to create hardened and stealthy troyans☆58Updated 4 years ago
- A More Comfortable (remote) SHell with full pty support and both reverse / bindport connection mode.☆30Updated 12 years ago
- Gozi ISFB is a well-known and widely distributed banking trojan, and has been in the threat landscape for the past several years.☆72Updated 7 years ago
- Watches for trigger packets, runs commands or spawns a shell☆26Updated 6 years ago
- Process reimaging proof of concept code☆97Updated 6 years ago
- ☆16Updated 6 years ago
- Ebfuscator: Abusing system errors for binary obfuscation☆52Updated 5 years ago