| milabs/awesome-linux-rootkits |
1,064 |
|
0 |
0 |
almost 4 years ago |
0 |
|
1 |
cc0-1.0 |
|
| awesome-linux-rootkits |
| mempodippy/vlany |
765 |
|
0 |
0 |
about 7 years ago |
0 |
|
12 |
gpl-3.0 |
C |
| Linux LD_PRELOAD rootkit (x86 and x86_64 architectures) |
| mncoppola/suterusu |
456 |
|
0 |
0 |
over 8 years ago |
0 |
|
4 |
mit |
C |
| An LKM rootkit targeting Linux 2.6/3.x on x86(_64), and ARM |
| swwwolf/wdbgark |
412 |
|
0 |
0 |
about 8 years ago |
0 |
|
1 |
other |
C++ |
| WinDBG Anti-RootKit Extension |
| therealdreg/enyelkm |
86 |
|
0 |
0 |
over 2 years ago |
0 |
|
0 |
mit |
C |
| LKM rootkit for Linux x86 with the 2.6 kernel. It inserts salts inside system_call and sysenter_entry. |
| therealdreg/cgaty |
66 |
|
0 |
0 |
over 2 years ago |
0 |
|
0 |
mit |
C |
| Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022) |
| aesophor/satan |
20 |
|
0 |
0 |
about 6 years ago |
0 |
|
0 |
gpl-2.0 |
C |
| 🔓 x86 Linux Kernel rootkit for Debian 9 (4.9.0-11-686-pae) |
| schischi/slrk |
12 |
|
0 |
0 |
almost 11 years ago |
0 |
|
0 |
|
C |
| Linux rootkit experimentations |
| spiderpig1297/kprochide |
7 |
|
0 |
0 |
over 5 years ago |
0 |
|
0 |
|
C |
| kprochide is an LKM for hiding processes from the userland. The module is able to hide multiple processes and is able to dynamically receive new processes to hide. |
