rootfoo / rootkitLinks
Fully functional but simplified Linux Kernel Module (LKM) Rootkit for educational purposes
☆61Updated 6 years ago
Alternatives and similar repositories for rootkit
Users that are interested in rootkit are comparing it to the libraries listed below
Sorting:
- JynxKit2 is an LD_PRELOAD userland rootkit based on the original JynxKit. The backdoor has been replaced with an "accept()" system hook.☆174Updated 12 years ago
- A LKM rootkit for most newer kernel versions.☆177Updated 7 years ago
- LKM rootkit for Linux x86 with the 2.6 kernel. It inserts salts inside system_call and sysenter_entry.☆87Updated last year
- ELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection)☆134Updated 7 years ago
- Proof of concept for injecting simple shellcode via ptrace into a running process.☆72Updated 2 years ago
- Matryoshka - stacked LKM loader☆52Updated last year
- Linux v4.x.x Rootkit☆92Updated last year
- Injects additional machine instructions into various binary formats.☆285Updated last year
- The first Linux hooking framework to allow merging two binary files into one!☆95Updated 2 months ago
- Devestating and awesome Linux X86_64 ELF Virus☆231Updated 2 years ago
- A ptrace POC by hooking SSH to reveal provided passwords☆185Updated 8 years ago
- Exploit Development, Reverse Engineering & Cryptography☆255Updated 4 years ago
- A collection of Linux kernel rootkits found across the internet taken and put together☆77Updated 2 years ago
- sample linux x86_64 ELF virus☆53Updated 7 years ago
- Injects code into ELF executables post-build☆235Updated last year
- ELF Shared library injector using DT_NEEDED precedence infection. Acts as a permanent LD_PRELOAD☆110Updated 5 years ago
- a summary of linux rootkits published on GitHub☆178Updated 5 years ago
- Linux based inter-process code injection without ptrace(2)☆251Updated 7 years ago
- Generate very tiny reverse shell binaries for Linux~☆76Updated 5 years ago
- Hide processes as a normal user in Linux.☆258Updated last year
- Binary Golf Library☆61Updated 4 years ago
- Linux kernel XFRM UAF poc (3.x - 5.x kernels)☆135Updated 5 years ago
- Code for my 0x00sec.org posts☆325Updated 4 years ago
- A tool like /bin/ps but uses /proc/kcore for walking the tasklist; this finds hidden processes☆58Updated 10 years ago
- Backdoor that listens for specially crafted ICMP packets and spawns reverse shells.☆71Updated 5 years ago
- Rootkit spotter - experimental Linux rootkit finder LKM☆30Updated 4 years ago
- A simple embedded Linux backdoor.☆199Updated 4 years ago
- Fork of mona.py with x64dbg support☆105Updated 3 years ago
- List of real-world threats against endpoint protection software☆216Updated 8 months ago
- This is a kernel module invoked reverse shell proof of concept.☆72Updated 5 years ago