This is the list of all rootkits found so far on github and other sites.
☆1,484Aug 29, 2025Updated last year
Alternatives and similar repositories for RootKits-List-Download
Users that are interested in RootKits-List-Download are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- awesome-linux-rootkits☆2,112Feb 15, 2026Updated 8 months ago
- ☆517Nov 21, 2020Updated 5 years ago
- LKM Linux rootkit☆2,745Aug 17, 2026Updated 2 months ago
- Linux rootkit for Ubuntu 16.04 and 10.04 (Linux Kernels 4.4.0 and 2.6.32), both i386 and amd64☆831Apr 7, 2024Updated 2 years ago
- Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)☆991Dec 11, 2020Updated 5 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- LibZeroEvil & the Research Rootkit project.☆603Dec 1, 2021Updated 4 years ago
- LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)☆2,483Apr 27, 2026Updated 5 months ago
- Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.☆2,204Jul 28, 2026Updated 2 months ago
- Kernel rootkit, that lives inside the Windows registry values data☆505Oct 8, 2017Updated 9 years ago
- windows kernel security development☆2,071Sep 6, 2022Updated 4 years ago
- Sample Rootkit for Linux☆406Jul 29, 2024Updated 2 years ago
- An LKM rootkit targeting Linux 2.6/3.x on x86(_64), and ARM☆689Nov 21, 2017Updated 8 years ago
- linux rootkit☆162Feb 12, 2018Updated 8 years ago
- Python Remote Administration Tool (RAT) to gain meterpreter session☆641Oct 29, 2024Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- AntiVirus Evasion Tool☆1,760Apr 23, 2025Updated last year
- Windows Event Log Killer☆1,808Sep 21, 2023Updated 3 years ago
- Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.☆945Mar 29, 2022Updated 4 years ago
- Shellcode Compiler☆1,161Sep 1, 2024Updated 2 years ago
- A rootkit for Android. Based on "Android platform based linux kernel rootkit" from Phrack Issue 68☆283Nov 4, 2023Updated 2 years ago
- My proof-of-concept exploits for the Linux kernel☆1,587Sep 11, 2025Updated last year
- linux-kernel-exploits Linux平台提权漏洞集合☆5,662Jul 13, 2020Updated 6 years ago
- a summary of linux rootkits published on GitHub☆199May 7, 2020Updated 6 years ago
- Privilege Escalation Project - Windows / Linux / Mac☆2,629Oct 4, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C☆9,006Mar 22, 2024Updated 2 years ago
- Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode☆2,554Nov 15, 2023Updated 2 years ago
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆4,730Jul 8, 2025Updated last year
- Wiki to collect Red Team infrastructure hardening resources☆4,543Oct 1, 2025Updated last year
- This is a linux rootkit using many of the techniques described on☆166Oct 22, 2019Updated 7 years ago
- Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.☆1,938Sep 7, 2020Updated 6 years ago
- My musings with PowerShell☆2,738Nov 19, 2021Updated 4 years ago
- Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors☆3,440Oct 30, 2023Updated 2 years ago
- WinDBG Anti-RootKit Extension☆642Jul 29, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc☆2,068Jul 13, 2022Updated 4 years ago
- A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks☆1,478Nov 3, 2018Updated 7 years ago
- windows-kernel-exploits Windows平台提权漏洞集合☆8,763Jun 11, 2021Updated 5 years ago
- Kernel-Mode Rootkit Hunter☆371Nov 13, 2021Updated 4 years ago
- InjectProc - Process Injection Techniques [This project is not maintained anymore]☆993Feb 10, 2019Updated 7 years ago
- Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.☆7,164Jul 1, 2026Updated 3 months ago
- ✍️ A curated list of CVE PoCs.☆3,542Jan 4, 2022Updated 4 years ago