Scripts to decloak Linux Loadable Kernel Module (LKM) stealth rootkits.
☆35Sep 28, 2025Updated 10 months ago
Alternatives and similar repositories for sandfly-kernel-module-decloak
Users that are interested in sandfly-kernel-module-decloak are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Small scripts to help with Linux forensics and incident response.☆57Sep 29, 2025Updated 10 months ago
- A simple tool for interacting with urlquery.net from the command line☆16Jul 5, 2025Updated last year
- A harmless Netcat-lookalike for detection testing. Simulates NC-style command-line flags and listener behavior without exposing a real ba…☆37Nov 27, 2025Updated 8 months ago
- Memory protection and randomization tests (not limited to PaX enabled kernels)☆13Mar 5, 2024Updated 2 years ago
- reveal xored strings in mirai binary☆12Oct 24, 2018Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A Lazy Programmer's Tips for Avoiding the SOC ~ BSides Belfast 2024☆17Sep 12, 2024Updated last year
- Backdoor that leverages Nmap with setuid permissions to execute commands as root through a Lua-loaded C library☆54Oct 28, 2025Updated 9 months ago
- 🔐 Wrap keys from HSM using CKM_RSA_AES_KEY_WRAP step by step☆13Dec 10, 2021Updated 4 years ago
- ☆11Nov 28, 2016Updated 9 years ago
- Windows Event Log Killer☆11May 22, 2017Updated 9 years ago
- service to convert nfcapd files clickhouse as they are created☆10Mar 22, 2025Updated last year
- Port of Mandiant ShellcodeHashes plugin from IDA to BinaryNinja☆11Jul 24, 2024Updated 2 years ago
- Sh3ller is a lightweight C2 framework in its simplest form.☆33Sep 5, 2025Updated 11 months ago
- ☆34Mar 7, 2020Updated 6 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆88Nov 14, 2025Updated 8 months ago
- Pure Python netflow (1K PPS!) and DNS correlation, with reusable Frame Streams, DnsTap and Protobuf implementations☆17Jul 28, 2026Updated last week
- RDP Credential Provider☆13Oct 29, 2025Updated 9 months ago
- Force target victim to unsafe network☆33Jun 6, 2025Updated last year
- CVE 2025 27237 Zabbix LPE proof of concept.☆20Jan 26, 2026Updated 6 months ago
- fork from http://icmpshell.sourceforge.net☆15Nov 26, 2015Updated 10 years ago
- Repository for the home climate monitoring I built☆17Jul 9, 2019Updated 7 years ago
- Build wordlists from the common-crawl index☆11Oct 9, 2022Updated 3 years ago
- command line tool to use the DNSDB Flexible Search API extensions.☆16Aug 5, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Released alongside with a talk at REcon 2023, TheRestarter is an interactive command-line tool is designed to interact with the Windows …☆14Jun 8, 2023Updated 3 years ago
- Brutteforce for stego CTFs☆17Nov 2, 2022Updated 3 years ago
- This directory contains presentations and related materials of my speaking engagements. I also use this to record historical presentation…☆18Feb 13, 2025Updated last year
- Pairwise Ranking Aggregation in a Crowdsourced Setting☆13Apr 13, 2014Updated 12 years ago
- CVE-2025-31644: Command Injection in Appliance mode in F5 BIG-IP☆24May 11, 2025Updated last year
- Enumerate SSN (System Service Numbers or Syscall ID) and syscall instruction address in ntdll module by parsing the PEB of the current pr…☆22Jan 28, 2024Updated 2 years ago
- A javascript library to convert Outlook *.msg files to *.eml☆11Jun 27, 2024Updated 2 years ago
- TeamViewer User to Kernel Elevation of Privilege PoC. CVE-2024-7479 and CVE-2024-7481. ZDI-24-1289 and ZDI-24-1290. TV-2024-1006.☆137Dec 22, 2024Updated last year
- ☆41Mar 19, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Non-intrusive instruction tracing for Raspberry Pi RP2350☆24Feb 9, 2025Updated last year
- 🧞♂️ malware analysis☆40Mar 3, 2024Updated 2 years ago
- Random Powershell scripts☆13Feb 13, 2024Updated 2 years ago
- Probuster : A Python based Web Application Penetration testing tool for Information Gathering⚡.☆61Nov 22, 2024Updated last year
- Repository for Knowledge Centre Articles☆19Jan 23, 2023Updated 3 years ago
- PoC for CVE-2025-4660 demonstrating exploitation of the Forescout SecureConnector on Windows☆16Jul 16, 2025Updated last year
- The samples referenced in my book, Evasive Malware (No starch Press)☆62Feb 20, 2026Updated 5 months ago