| m0nad/Diamorphine |
1,503 |
|
0 |
0 |
almost 3 years ago |
0 |
|
9 |
other |
C |
| LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64) |
| milabs/awesome-linux-rootkits |
1,064 |
|
0 |
0 |
about 4 years ago |
0 |
|
1 |
cc0-1.0 |
|
| awesome-linux-rootkits |
| Gui774ume/ebpfkit |
846 |
|
0 |
0 |
over 3 years ago |
0 |
|
4 |
apache-2.0 |
C |
| ebpfkit is a rootkit powered by eBPF |
| Gui774ume/ebpfkit-monitor |
87 |
|
0 |
0 |
over 3 years ago |
0 |
|
2 |
apache-2.0 |
C |
| ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits |
| PinkP4nther/Sutekh |
78 |
|
0 |
0 |
over 6 years ago |
0 |
|
0 |
|
C |
| An example rootkit that gives a userland process root permissions |
| croemheld/lkm-rootkit |
72 |
|
0 |
0 |
almost 9 years ago |
0 |
|
0 |
gpl-3.0 |
C |
| A LKM rootkit for most newer kernel versions. |
| h3xduck/Umbra |
31 |
|
0 |
0 |
almost 5 years ago |
0 |
|
0 |
gpl-2.0 |
C |
| A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malware and more. |
| kacheo/KernelRootkit |
26 |
|
0 |
0 |
over 12 years ago |
0 |
|
0 |
|
|
| Linux kernel rootkit to hide certain files and processes. |
| yasindce1998/KubeDagger |
22 |
|
0 |
0 |
over 3 years ago |
0 |
|
1 |
apache-2.0 |
C |
| Kubernetes offensive framework built in eBPF |
| aesophor/satan |
20 |
|
0 |
0 |
over 6 years ago |
0 |
|
0 |
gpl-2.0 |
C |
| 🔓 x86 Linux Kernel rootkit for Debian 9 (4.9.0-11-686-pae) |
