Statistics for topic rootkit

Linux/Windows post-exploitation framework made by linux user

PCI Express DIY hacking toolkit for Xilinx SP605. This repository is also home of Hyper-V Backdoor and Boot Backdoor, check readme for links and info

Now You See Me, Now You Don't

Hiding kernel-driver for x86/x64.

This page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.

This page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.

Windows Kernel Rootkit in Rust

Linux/Windows post-exploitation framework made by linux user

PCI Express DIY hacking toolkit for Xilinx SP605. This repository is also home of Hyper-V Backdoor and Boot Backdoor, check readme for links and info

Now You See Me, Now You Don't

Linux/Windows post-exploitation framework made by linux user

In-Memory Rootkit For Linux

Nidhogg is an all-in-one simple to use windows kernel rootkit.

🌳 Go Bonzai™ CLI framework and "batteries included" library of utilities

Hiding kernel-driver for x86/x64.

In-Memory Rootkit For Linux

Stuxnet extracted binaries by reversing & Stuxnet Rootkit Analysis

🌳 Go Bonzai™ CLI framework and "batteries included" library of utilities

Linux/Windows post-exploitation framework made by linux user

Academic project of Linux rootkit made for Bachelor Engineering Thesis.

Linux/Windows post-exploitation framework made by linux user

Windows Kernel Rootkit in Rust

In-Memory Rootkit For Linux

🌳 Go Bonzai™ CLI framework and "batteries included" library of utilities

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

In-Memory Rootkit For Linux

Windows Kernel Rootkit in Rust

Stuxnet extracted binaries by reversing & Stuxnet Rootkit Analysis

🌳 Go Bonzai™ CLI framework and "batteries included" library of utilities

SMM driver/rootkit for platform memory access with R3 <-> R0 <-> R-2 communication.

PoCs for Kernelmode rootkit techniques research.

Windows Kernel Rootkit in Rust

Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust (Codename: Illusion)

SMM driver/rootkit for platform memory access with R3 <-> R0 <-> R-2 communication.

In-Memory Rootkit For Linux

Nidhogg is an all-in-one simple to use windows kernel rootkit.

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc

Windows Kernel Rootkit in Rust

ModTracer Finds Hidden Linux Kernel Rootkits and then make visible again.

PoCs for Kernelmode rootkit techniques research.

Make an Linux Kernel rootkit visible again.

SMM driver/rootkit for platform memory access with R3 <-> R0 <-> R-2 communication.