Alternatives and similar repositories for rootkit:

Users that are interested in rootkit are comparing it to the libraries listed below

• MortenSchenk / Bypassing_CFG_SEH
  Using SEH to bypass CFG
  ☆29Updated 7 years ago
• mponcet / subversive
  x86_64 linux rootkit using debug registers
  ☆52Updated 3 years ago
• k0keoyo / CVE-2015-2546-Exploit
  ☆22Updated 7 years ago
• cyberark / KDSnap
  ☆12Updated 7 years ago
• vallejocc / Malware-Analysis-scripts
  Scripts targeting specific families
  ☆13Updated 7 years ago
• Cn33liz / HSEVD-StackOverflow
  HackSys Extreme Vulnerable Driver - StackOverflow Exploit
  ☆31Updated 8 years ago
• 4B5F5F4B / PoCs
  ☆26Updated 8 years ago
• stillson / shellcode
  Win32 Shellcodes
  ☆9Updated 7 years ago
• zenhumany / blackhat_asia_2017
  black hat Asia 2017 Slides
  ☆22Updated 7 years ago
• x64dbg / x64dbgpylib
  Port of windbglib to x64dbgpy, in an effort to support mona.py in x64dbg.
  ☆51Updated 5 years ago
• rolinston / explib2
  ☆19Updated 10 years ago
• k0keoyo / HEVD-Arbitrary-Overwrite-Exploit-Win10-rs3
  ☆34Updated 7 years ago
• sam-b / windows_syscalls_dumper
  A dirty IDAPython script to dump windows system call number/name pairs as JSON
  ☆37Updated 8 years ago
• de7ec7ed / CVE-2016-0040
  CVE-2016-0040 Privilege Escalation Exploit For WMI Receive Notification Vulnerability (x86-64)
  ☆14Updated 6 years ago
• int0 / ltmdm64_poc
  ☆28Updated 7 years ago
• RanchoIce / 44Con2018
  Slides of 44Con 2018
  ☆21Updated 6 years ago
• helpsystems / GDIObjDump
  ☆33Updated 9 years ago
• RISCYBusiness / Jadoube
  ☆22Updated 7 years ago
• ETeissonniere / EliDecode
  The tool to decode obfuscated shellcodes using the unicorn and capstone engine
  ☆56Updated 8 years ago
• k33nteam / win32kescape
  ☆15Updated 9 years ago
• sam-b / HackSysDriverExploits
  ☆50Updated 7 years ago
• demi6od / Smashing_The_Browser_2
  A Modern Approach
  ☆10Updated 9 years ago
• isra17 / shelltrace
  Shellcode tracer
  ☆15Updated 8 years ago
• PinDemonium / PinDemonium
  An implementation of a generic unpacker based on Intel PIN
  ☆29Updated 8 years ago
• kacheo / KernelRootkit
  Linux kernel rootkit to hide certain files and processes.
  ☆36Updated 10 years ago
• m101 / hsploit
  HEVD Multi-Exploit by m_101
  ☆23Updated 6 years ago
• debasishm89 / Brucon0x09
  Slides & Video Demos of My Talk Titled Browser Exploits? Grab ’em by the Collar! @ Brucon0x09
  Updated 7 years ago
• maldiohead / idapin
  plugin of ida with pin
  ☆48Updated 4 years ago
• silentsignal / heureka
  A toolset to assess the behavioral capabilities of AV/HIPS software
  ☆8Updated 11 years ago
• Cn33liz / HSEVD-StackCookieBypass
  HackSys Extreme Vulnerable Driver - StackOverflow with Stack Cookie Bypass Exploit
  ☆18Updated 8 years ago