Alternatives and similar repositories for rootkit:

Users that are interested in rootkit are comparing it to the libraries listed below

• croemheld / lkm-rootkit
  A LKM rootkit for most newer kernel versions.
  ☆172Updated 7 years ago
• tsarpaul / GLORYHook
  The first Linux hooking framework to allow merging two binary files into one!
  ☆94Updated 4 years ago
• milabs / kmatryoshka
  Matryoshka - stacked LKM loader
  ☆50Updated last year
• W3ndige / linux-process-injection
  Proof of concept for injecting simple shellcode via ptrace into a running process.
  ☆64Updated 2 years ago
• xpn / ssh-inject
  A ptrace POC by hooking SSH to reveal provided passwords
  ☆181Updated 7 years ago
• Error996 / bdvl
  bdvl
  ☆112Updated 2 years ago
• chokepoint / Jynx2
  JynxKit2 is an LD_PRELOAD userland rootkit based on the original JynxKit. The backdoor has been replaced with an "accept()" system hook.
  ☆167Updated 12 years ago
• dsnezhkov / zombieant
  Zombie Ant Farm: Primitives and Offensive Tooling for Linux EDR evasion.
  ☆224Updated 5 years ago
• sandflysecurity / sandfly-processdecloak
  Sandfly Linux Stealth Rootkit Decloaking Utility
  ☆98Updated 2 years ago
• Plazmaz / CVE-2019-18634
  A functional exploit for CVE-2019-18634, a BSS overflow in sudo's pwfeedback feature that allows for for privesc
  ☆58Updated 5 years ago
• hacksysteam / WpadEscape
  Sandbox escape using WinHTTP Web Proxy Auto-Discovery Service
  ☆85Updated 5 years ago
• maK- / reverse-shell-access-kernel-module
  This is a kernel module invoked reverse shell proof of concept.
  ☆72Updated 5 years ago
• PinkP4nther / Sutekh
  An example rootkit that gives a userland process root permissions
  ☆78Updated 5 years ago
• netspooky / reversi
  Generate very tiny reverse shell binaries for Linux~
  ☆76Updated 4 years ago
• duasynt / xfrm_poc
  Linux kernel XFRM UAF poc (3.x - 5.x kernels)
  ☆133Updated 4 years ago
• therealdreg / enyelkm
  LKM rootkit for Linux x86 with the 2.6 kernel. It inserts salts inside system_call and sysenter_entry.
  ☆86Updated last year
• mandiant / flare-kscldr
  FLARE Kernel Shellcode Loader
  ☆176Updated 5 years ago
• infosecguerrilla / ReflectiveSOInjection
  Reflective SO injection is a library injection technique in which the concept of reflective programming is employed to perform the loadin…
  ☆116Updated 8 years ago
• njahrckstr / Windows_Kernel_Sploit_List
  ☆36Updated 6 years ago
• elfmaster / dt_infect
  ELF Shared library injector using DT_NEEDED precedence infection. Acts as a permanent LD_PRELOAD
  ☆109Updated 4 years ago
• AonCyberLabs / Cexigua
  Linux based inter-process code injection without ptrace(2)
  ☆241Updated 7 years ago
• milabs / lkrg-bypass
  LKRG bypass methods
  ☆70Updated 5 years ago
• taviso / scanlimits
  Tool to examine the behaviour of setuid binaries under constrained limits.
  ☆62Updated 3 years ago
• nccgroup / thetick
  A simple embedded Linux backdoor.
  ☆196Updated 4 years ago
• ihack4falafel / Slink
  Alphanumeric Shellcode (x86) Encoder
  ☆75Updated 2 years ago
• xcellerator / libgolf
  Binary Golf Library
  ☆63Updated 3 years ago
• Andromeda1957 / Reversing-Challenges
  Reverse engineering challenges
  ☆50Updated 5 years ago
• h0mbre / busychild
  a pstree mod that prints other helpful information and with added functionality
  ☆24Updated 4 years ago
• HexHive / malWASH
  ☆113Updated 8 years ago
• QuokkaLight / rkduck
  Linux v4.x.x Rootkit
  ☆88Updated 6 months ago