vkobel / linux-syscall-hook-rootkit
Simple kernel module that hooks the `execve` syscall and waits for `date` to be executed with the `backd00r` argument followed by a PID number, elevating it to root credentials.
☆23Updated 4 years ago
Alternatives and similar repositories for linux-syscall-hook-rootkit:
Users that are interested in linux-syscall-hook-rootkit are comparing it to the libraries listed below
- Explore a live Linux kernel's memory using GDB☆114Updated 2 years ago
- A small library to modify all page-table levels of all processes from user space for x86_64 and ARMv8.☆250Updated 5 months ago
- Linux Kernel hooking engine (x86)☆340Updated 3 months ago
- ☆156Updated 2 months ago
- userland exec for Linux x86_64☆66Updated 2 years ago
- A simple hypervisor demonstrating the use of the Intel VT-rp (redirect protection) technology.☆101Updated last year
- A git clone of the official mercurial repository☆89Updated 3 months ago
- Kernel Address Space Layout Derandomization (KASLD) - A collection of various techniques to infer the Linux kernel base virtual address a…☆436Updated 11 months ago
- ugly code to check linux kernel memory and dump some internal structures☆46Updated 4 months ago
- An ongoing attempt to create own hypervisior from scratch in linux.☆49Updated 3 years ago
- A small kernel module that can hook arbitrary syscalls on x86_64☆52Updated 5 years ago
- A simple in-kernel tcp client and server implemented as LKMs☆53Updated last year
- bareflank based hypervisor with guest support☆60Updated 4 years ago
- ☆90Updated 11 months ago
- Using ftrace for function hooking in Linux kernel☆266Updated 4 years ago
- A survey of techniques to hook and/or replace functions in executable binaries or shared libraries☆27Updated 4 years ago
- Helper script for Linux kernel disassemble or debugging with IDA Pro on VMware + GDB stub (including some symbols helpers)☆35Updated last year
- A very simple hypervisor for learning experience.☆136Updated 3 years ago
- TikTag: Breaking ARM's Memory Tagging Extension with Speculative Execution (IEEE S&P 2025)☆63Updated 4 months ago
- A collection of Linux kernel rootkits found across the internet taken and put together☆73Updated 2 years ago
- 64bit bare metal hypervisor built from scratch with Intel VT-x☆91Updated 4 years ago
- EFI Byte Code Virtual Machine in userspace☆77Updated 2 years ago
- Collection of simple anti-debugging tricks for Linux☆55Updated 6 years ago
- A small fun project to protect a file from writing using ftrace hooking.☆25Updated 3 years ago
- Linux syscall() injection☆36Updated 4 years ago
- ☆13Updated 4 years ago
- KVM-based Virtual Machine Introspection☆331Updated 5 months ago
- A LKM rootkit for most newer kernel versions.☆173Updated 7 years ago
- LKRG bypass methods☆71Updated 5 years ago
- Automatically exported from code.google.com/p/hyperdbg☆104Updated 9 years ago