Linux rootkit for Ubuntu 16.04 and 10.04 (Linux Kernels 4.4.0 and 2.6.32), both i386 and amd64

Academic project of Linux rootkit made for Bachelor Engineering Thesis.

A rootkit for Android.

Cerez 😈 userland LD_PRELOAD rootkit

Ftrace Based Linux Loadable Kernel Module Rootkit for Linux Kernel 5.x and 6.x on x86_64, hides files, hides process, hides bind shell & reverse shell port, privilege escalation, cleans up logs and bash history during installation

Linux userland rootkit. Hides file and directory, hides process, hides bind shell port, hides daemon port, hides reverse shell port, cleans up bash history and logs during installation

PoC for a kernel rootkit

LD_PRELOAD rootkit that hooks raw syscalls with zpoline

Linux Loadable Kernel Module Rootkit for Linux Kernel 5.x and 6.x on x86_64, hides files, hides process, hides bind shell & reverse shell port, privilege escalation, cleans up logs and bash history during installation

LKM rootkit for modern kernels, with DNS C2 and a simple web interface

A malicious root kit made using c

HiddenGhost is an new solution for find system call table with support for 5.7x kernels +

this repository is purposed for learning about rootkit-development and kernel hacking

Linux Rootkit