Topic: rootkit Goto Github

👇 Here are 226 public repositories matching this topic...

axtmueller / windows-batch-deployment
rootkit,A programmable and rootkit-like Windows remote access tool.
User: axtmueller
Home Page: https://github.com/AxtMueller/Windows-Batch-Deployment#contact
rootkit bootkit carberp zeroaccess flame stuxnet rovnix hxdef

bitdefender / hvmi
rootkit,Hypervisor Memory Introspection Core Library
Organization: bitdefender
Home Page: https://bitdefender.github.io/hvmi-blog/
hypervisor memory introspection rootkit exploit protection

bytecode77 / r77-rootkit
rootkit,Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.
User: bytecode77
Home Page: https://bytecode77.com/r77-rootkit
rootkit fileless av-evasion

carloslack / kovid
rootkit,Linux kernel rootkit
User: carloslack
assembly backdoor bpf bpf-maps c firewall-bypass for-educational-purposes-only kernel linux module rootkit rust ssh tasks tty ubuntu x64

cr0nx / awesome-linux-attack-forensics-purplelabs
rootkit,This page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.
User: cr0nx
attack-defense blueteam detection dfir injection linux purplelabs purpleteam redteam rootkit

cr4sh / s6_pcie_microblaze
rootkit,PCI Express DIY hacking toolkit for Xilinx SP605. This repository is also home of Hyper-V Backdoor and Boot Backdoor, check readme for links and info
User: cr4sh
pci-e fpga dma uefi hypervisor rootkit xilinx microblaze hyper-v backdoor kernel

cr4sh / windowsregistryrootkit
rootkit,Kernel rootkit, that lives inside the Windows registry values data
User: cr4sh
anti-forensics backdoor exploit file-less kernel malware metasploit meterpreter ndis registry

croemheld / lkm-rootkit
rootkit,A LKM rootkit for most newer kernel versions.
User: croemheld
kernel kernel-modules linux-kernel rootkit

crvvdev / masterhide
rootkit,A x64 Windows Rootkit using SSDT or Hypervisor hook
User: crvvdev
rootkit ssdt windows hypervisor

d30sa1 / rootkits-list-download
rootkit,This is the list of all rootkits found so far on github and other sites.
User: d30sa1
rootkits redteam offensive-scripts rootkit

daem0nc0re / vectorkernel
rootkit,PoCs for Kernelmode rootkit techniques research.
User: daem0nc0re
kernel rootkit windows

emcruise / tor-rootkit
rootkit,A Python 3 standalone Windows 10 / Linux Rootkit using Tor.
User: emcruise
tor rootkit python3-rootkit reverse-shell hidden-services tor-expert-bundle security rat remote-administration-tool windows-10

eversinc33 / banshee
rootkit,Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.
User: eversinc33
driver kernel malware-development ring0 rootkit

explife0011 / awesome-windows-kernel-security-development
rootkit,windows kernel security development
User: explife0011
rootkit bootkit antirootkit antivirus shellcode driver framework

fiyher / infinityhookpro
rootkit,InfinityHookPro Win7 -> Win11 latest
User: fiyher
infinityhook hook patchguard rootkit kernel driver win7 win8 win10 win11

gui774ume / ebpfkit
rootkit,ebpfkit is a rootkit powered by eBPF
User: gui774ume
ebpf kernel linux linux-kernel linux-kernel-hacking rootkit runtime-security security

gui774ume / ebpfkit-monitor
rootkit,ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
User: gui774ume
ebpf kernel linux linux-kernel linux-kernel-hacking rootkit runtime-security security

h3xduck / triplecross
rootkit,A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
User: h3xduck
backdoor ebpf kernel rootkit security libbpf

h3xduck / umbra
rootkit,A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malware and more.
User: h3xduck
kernel rootkit linux-kernel linux-kernel-module kernel-module backdoor ransomware malware

hiteshd / android-rootkit
rootkit,A rootkit for Android. Based on "Android platform based linux kernel rootkit" from Phrack Issue 68
User: hiteshd
android android-rootkit rootkit

hkx3upper / karlann
rootkit,It's a kernel-based keylogger for Windows x86/x64.
User: hkx3upper
hacking keyboard keylogger rat rootkit windows

idov31 / jormungandr
rootkit,Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.
User: idov31
cpp cyber-security cybersecurity driver infosec kernel red-team redteam rootkit windows windows-rootkits

idov31 / nidhogg
rootkit,Nidhogg is an all-in-one simple to use rootkit.
User: idov31
Home Page: https://idov31.github.io/posts/lord-of-the-ring0-p1
cpp cyber-security cybersecurity driver infosec kernel red-team redteam rootkit windows windows-rootkits

jivoi / openssh-backdoor-kit
rootkit,:bomb: just for fun ¯\_(ツ)_/¯
User: jivoi
backdoor sshd rootkit

jkornev / hidden
rootkit,🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc
User: jkornev
windows security malware-analysis registry driver kernel rootkit rce

jm33-m0 / emp3r0r
rootkit,Linux/Windows post-exploitation framework made by linux user
User: jm33-m0
Home Page: https://infosec.exchange/@jm33
post-exploitation stealth linux hacking-tool emp3r0r rat trojan-malware malware redteam redteaming

joaoviictorti / shadow-rs
rootkit,Windows Kernel Rootkit in Rust
User: joaoviictorti
ring0 rootkit rust windows

kkamagui / shadow-box-for-x86
rootkit,Shadow-Box: Lightweight and Practical Kernel Protector for x86 (Presented at BlackHat Asia 2017/2018, beVX 2018 and HITBSecConf 2017)
User: kkamagui
rootkit kernel hypervisor linux blackhat hitbsecconf bevx

landhb / hideprocess
rootkit,A basic Direct Kernel Object Manipulation rootkit that removes a process from the EPROCESS list, hiding it from the Task Manager
User: landhb
dkom kernel-driver rootkit old-school

ldpreload / medusa
rootkit,LD_PRELOAD Rootkit
User: ldpreload
backdoor ldpreload linux malware rootkit

loneicewolf / stuxnet-source
rootkit,stuxnet Source & Binaries. (+PLC ROOTKIT) ONLY FOR ACADEMICAL RESEARCH AND EDUCATIONAL PURPOSES! Includes: Source files, Binaries, PLC Samples,Fanny Added in another repo.
User: loneicewolf
stuxnet rootkit malware plc scada-security reverse-engineering malwareanalysis stuxnet-source equationgroup plc-samples

m0nad / diamorphine
rootkit,LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)
User: m0nad
rootkit lkm-rootkit c kernel kernel-module security-tools linux linux-kernel hacking hacking-tool

mav8557 / father
rootkit,LD_PRELOAD rootkit
User: mav8557
rootkit malware backdoor security ld-preload c linux redteam

memn0ps / eagle-rs
rootkit,Rusty Rootkit - Windows Kernel Rookit in Rust (Codename: Eagle)
User: memn0ps
Home Page: https://memn0ps.github.io/rusty-windows-kernel-rootkit/
kernel ring0 rootkit rust windows

memn0ps / illusion-rs
rootkit,Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust (Codename: Illusion)
User: memn0ps
blue-pill hypervisor intel rust uefi virtualization vt-x windows ring-1 bootkit

memn0ps / matrix-rs
rootkit,Rusty Hypervisor - Windows Kernel Blue Pill Type-2 Hypervisor in Rust (Codename: Matrix)
User: memn0ps
Home Page: https://memn0ps.github.io/hypervisor-development-in-rust-part-1/
blue-pill hypervisor rust windows ring-1 intel vt-x virtualization rootkit kernel

mempodippy / vlany
rootkit,Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)
User: mempodippy
rootkit ldpreload dynamic linker linux debian userland c libdl libpam

milabs / awesome-linux-rootkits
rootkit,awesome-linux-rootkits
User: milabs
awesome awesome-list linux linux-kernel lkm-rootkit rootkit

mrexodia / titanhide
rootkit,Hiding kernel-driver for x86/x64.
User: mrexodia
anti-debugging driver rootkit windows hacktoberfest

nurupo / rootkit
rootkit,Linux rootkit for Ubuntu 16.04 and 10.04 (Linux Kernels 4.4.0 and 2.6.32), both i386 and amd64
User: nurupo
rootkit kernel-module linux-rootkit linux-kernel-module

paradoxis / php-backdoor
rootkit,Your interpreter isn’t safe anymore  —  The PHP module backdoor
User: paradoxis
Home Page: https://blog.paradoxis.nl/your-interpreter-isnt-safe-anymore-the-php-module-rootkit-c7ca6a1a9af5
c php php-module php-rootkit rootkit

sad0p / d0zer
rootkit,Elf binary infector written in Go.
User: sad0p
elf-binaries virus linux rootkit

screetsec / vegile
rootkit,This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in metasploit and transparent. Even when it killed, it will re-run again. There always be a procces which while run another process,So we can assume that this procces is unstopable like a Ghost in The Shell
User: screetsec
rootkit msfvenom indonesia ghost post-exploitation backdoor metasploit infinite-scroll unlimited postgresql

sudoskys / root
rootkit,？什么你说Root？我不到啊 | 致力于编写全面详细的Root教程文档 | 刷机 | 安卓
User: sudoskys
Home Page: https://root.dianas.cyou
root rootkit android magisk

tkmru / awesome-linux-rootkits
rootkit,a summary of linux rootkits published on GitHub
User: tkmru
rootkit linux rootkits awesome-list

xaff-xaff / black-angel-rootkit
rootkit,Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality.
User: xaff-xaff
ring0 rootkit windows x64

xaff-xaff / cronos-rootkit
rootkit,Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.
User: xaff-xaff
kernel ring0 rootkit windows-10 windows-11 windows-rootkits x64

xaff-xaff / kernel-process-hollowing
rootkit,Windows x64 kernel mode rootkit process hollowing POC.
User: xaff-xaff
kernel-driver processhollowing rootkit windows x64

xl7dev / webshell
rootkit,Webshell && Backdoor Collection
User: xl7dev
Home Page: http://blog.safebuff.com/WebShell/
backdoor rootkit shell webshell

zeromemoryex / chaos-rootkit
rootkit,Now You See Me, Now You Don't
User: zeromemoryex
driver kernel malware-development rootkit