Scripts to decloak Linux Loadable Kernel Module (LKM) stealth rootkits.
☆35Sep 28, 2025Updated last year
Alternatives and similar repositories for sandfly-kernel-module-decloak
Users that are interested in sandfly-kernel-module-decloak are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A harmless Netcat-lookalike for detection testing. Simulates NC-style command-line flags and listener behavior without exposing a real ba…☆36Nov 27, 2025Updated 10 months ago
- Memory protection and randomization tests (not limited to PaX enabled kernels)☆13Mar 5, 2024Updated 2 years ago
- A minimalistic android backdoor☆19Aug 1, 2020Updated 6 years ago
- Utility to attempt to find the passphrase of a GPG secret key☆10May 23, 2024Updated 2 years ago
- A Lazy Programmer's Tips for Avoiding the SOC ~ BSides Belfast 2024☆17Sep 12, 2024Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- This exploit use PEB walk technique to resolve API calls dynamically, obfuscate all API calls to perform process injection.☆27Jul 26, 2024Updated 2 years ago
- A minimalistic LDAP server that is meant for test vulnerability to JNDI+LDAP injection attacks in Java, especially CVE-2021-44228.☆11Dec 13, 2021Updated 4 years ago
- 🔐 Wrap keys from HSM using CKM_RSA_AES_KEY_WRAP step by step☆13Dec 10, 2021Updated 4 years ago
- Backdoor that leverages Nmap with setuid permissions to execute commands as root through a Lua-loaded C library☆55Oct 28, 2025Updated 11 months ago
- ☆11Nov 28, 2016Updated 9 years ago
- Windows Event Log Killer☆11May 22, 2017Updated 9 years ago
- Port of Mandiant ShellcodeHashes plugin from IDA to BinaryNinja☆10Jul 24, 2024Updated 2 years ago
- Block ads and malicious domains with response policy zones☆12Jun 10, 2020Updated 6 years ago
- Sh3ller is a lightweight C2 framework in its simplest form.☆33Sep 5, 2025Updated last year
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- ☆34Mar 7, 2020Updated 6 years ago
- ☆89Nov 14, 2025Updated 10 months ago
- A Linux backdoor with the goal of circumventing network firewalls.☆16Nov 30, 2011Updated 14 years ago
- Force target victim to unsafe network☆33Jun 6, 2025Updated last year
- CVE 2025 27237 Zabbix LPE proof of concept.☆19Jan 26, 2026Updated 8 months ago
- fork from http://icmpshell.sourceforge.net☆15Nov 26, 2015Updated 10 years ago
- A Free Open sourced crypter that builds a output .NET .exe Stub (Updated whenever I feel like it)☆23Oct 18, 2025Updated 11 months ago
- Repository for the home climate monitoring I built☆16Jul 9, 2019Updated 7 years ago
- Build wordlists from the common-crawl index☆11Oct 9, 2022Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- command line tool to use the DNSDB Flexible Search API extensions.☆17Aug 5, 2024Updated 2 years ago
- Codebase for challenges in VHC_CTF_2023☆18Dec 12, 2023Updated 2 years ago
- Released alongside with a talk at REcon 2023, TheRestarter is an interactive command-line tool is designed to interact with the Windows …☆14Jun 8, 2023Updated 3 years ago
- This directory contains presentations and related materials of my speaking engagements. I also use this to record historical presentation…☆18Feb 13, 2025Updated last year
- A sshpass implementation for Linux and Mac in Go☆20May 16, 2024Updated 2 years ago
- Pure Python netflow (1K PPS!) and DNS correlation, with reusable Frame Streams, DnsTap and Protobuf implementations☆18Updated this week
- Enumerate SSN (System Service Numbers or Syscall ID) and syscall instruction address in ntdll module by parsing the PEB of the current pr…☆22Jan 28, 2024Updated 2 years ago
- CVE-2025-31644: Command Injection in Appliance mode in F5 BIG-IP☆24May 11, 2025Updated last year
- A javascript library to convert Outlook *.msg files to *.eml☆11Jun 27, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- TeamViewer User to Kernel Elevation of Privilege PoC. CVE-2024-7479 and CVE-2024-7481. ZDI-24-1289 and ZDI-24-1290. TV-2024-1006.☆136Dec 22, 2024Updated last year
- ☆41Mar 19, 2025Updated last year
- 🧞♂️ malware analysis☆40Mar 3, 2024Updated 2 years ago
- IOCs published by Black Lotus Labs☆144Sep 15, 2026Updated 3 weeks ago
- Random Powershell scripts☆13Feb 13, 2024Updated 2 years ago
- Probuster : A Python based Web Application Penetration testing tool for Information Gathering⚡.☆61Nov 22, 2024Updated last year
- A fully working example of how to exploit log4j on a minecraft server☆32Apr 24, 2023Updated 3 years ago