thalium / rkchkLinks
Rust Linux Kernel Module designed for LKM rootkit detection
☆57Updated 10 months ago
Alternatives and similar repositories for rkchk
Users that are interested in rkchk are comparing it to the libraries listed below
Sorting:
- Userland exec PoC to be used as attack vector technique☆93Updated 2 months ago
- Linpmem is a linux memory acquisition tool☆95Updated 6 months ago
- Attacking the cleanup_module function of a kernel module☆54Updated 6 months ago
- ElfDoor-gcc is an LD_PRELOAD that hijacks gcc to inject malicious code into binaries during linking, without touching the source code.☆131Updated 9 months ago
- Cheat sheet to detect and remove linux kernel rootkit☆77Updated last year
- OffensiveCon 2024 Repo, contains PoCs and materials for talk "UEFI and the Task of the Translator"☆43Updated last year
- CVE-2024-30090 - LPE PoC☆107Updated last year
- Open Source eBPF Malware Analysis Framework☆54Updated last year
- GoResolver is a Go analysis tool using both Go symbol extraction and Control Flow Graph (CFG) similarity to identify and resolve the func…☆76Updated 4 months ago
- A C++ tool for process memory scanning & suspicious telemetry generation that attempts to detect a number of malicious techniques used by…☆84Updated last year
- ☆90Updated last year
- Circumventing "noexec" mount flag to execute arbitrary linux binaries by ptrace-less process injection☆136Updated 7 months ago
- A Linux kernel rootkit in Rust using a custom made type-2 hypervisor, eBPF XDP and TC programs☆335Updated 6 months ago
- A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue☆107Updated last year
- Payload encoding utility to effectively lower payload entropy.☆121Updated 9 months ago
- Collection of codes focused on Linux rootkits☆192Updated 2 months ago
- yet another hidden LKM hunter☆29Updated 3 months ago
- Make an Linux Kernel rootkit visible again.☆59Updated 10 months ago
- Comprehensive Windows Syscall Extraction & Analysis Framework☆160Updated 4 months ago
- kubernetes rootkit☆34Updated 2 years ago
- A simple Meterpreter stager written in Rust.☆45Updated 2 months ago
- ☆58Updated last year
- A tool to interact with Windows drivers to perform a raw disk read and parse out target files without calling standard Windows file APIs☆102Updated 4 months ago
- Retrieve inner payloads from Donut samples☆116Updated last month
- POC of GITHUB simple C2 in rust☆52Updated 5 months ago
- ☆39Updated last year
- Windows AppLocker Driver (appid.sys) LPE☆71Updated last year
- eBPF hacks☆194Updated last year
- Vibe Malware Triage - MCP server for static PE analysis.☆74Updated last month
- HEVD Exploit: BufferOverflowNonPagedPoolNx on Windows 10 22H2 - Escalating from Low Integrity to SYSTEM via Aligned Chunk Confusion☆64Updated 8 months ago