spiderpig1297 / kprochide
kprochide is an LKM for hiding processes from the userland. The module is able to hide multiple processes and is able to dynamically receive new processes to hide.
☆21Updated 4 years ago
Alternatives and similar repositories for kprochide:
Users that are interested in kprochide are comparing it to the libraries listed below
- Poc for ELF64 runtime infection via GOT poisoning technique by elfmaster☆29Updated 4 years ago
- Rootkit Detector for UNIX☆62Updated last year
- ELF packer/crypter that aims to create hardened and stealthy troyans☆53Updated 3 years ago
- Exploits pack for the Windows Kernel mode driver HackSysExtremeVulnerableDriver written for educational purposes.☆65Updated 3 years ago
- An example of hijacking the dynamic linker with a custom interpreter who loads and executes modular viruses☆62Updated 2 years ago
- Rootkit spotter - experimental Linux rootkit finder LKM☆27Updated 4 years ago
- An Integrity-Check Monitoring Pintool☆56Updated 4 years ago
- Load a DLL from memory☆30Updated 3 years ago
- ELF Virus infection techniques that work with SCOP (Secure code partitioned) executables☆14Updated 5 years ago
- Rust binding for Keystone assembler framework☆11Updated 6 years ago
- kunkillable is an LKM that makes userland processes unkillable.☆15Updated 4 years ago
- Linux kernel rootkit using kprobes (From http://phrack.org/issues/67/6.html)☆38Updated 9 years ago
- Linux kernel rootkit to hide certain files and processes.☆36Updated 10 years ago
- Simple LKM linux kernel rootkit (x86 / x86_64)☆23Updated 4 years ago
- Ebfuscator: Abusing system errors for binary obfuscation☆52Updated 4 years ago
- Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis☆45Updated 7 years ago
- In line function hooking LKM rootkit☆51Updated 4 years ago
- kfile-over-icmp is an LKM for stealth sending of files over ICMP communication.☆16Updated 4 years ago
- r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems☆26Updated 6 years ago
- Another (bad) ROP gadget finder, but this time in Rust☆18Updated 9 months ago
- Crystal Anti-Exploit Protection 2012☆35Updated 4 years ago
- PoC code using debugfs to store files in memory and execute them☆26Updated 6 years ago
- Privilege Escilation training project, with an emphasis on the distinction between vulnerability research & it's exposure and exploitatio…☆35Updated 8 years ago
- PoC multi-layer protector for ELF32 x86 binaries☆10Updated 2 years ago
- Small Rust programs that do weird things☆27Updated 2 years ago
- Evasive ELF Static PIE User-Land-Exec featured in Tmpout Vol 1.☆25Updated 3 years ago
- Matryoshka - stacked LKM loader☆50Updated last year
- ☆36Updated 5 years ago
- Rekall Memory Forensic Framework☆30Updated 5 years ago
- Vagrant setup for building a machine for CTF/exploit development☆23Updated 5 years ago