rootkits 开源项目推荐（45 个）

Idov31 /Nidhogg

Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.

skyw4tch3r /RootKits-List-Download

This is the list of all rootkits found so far on github and other sites.

openclarity /openclarity

OpenClarity is an open source platform built to enhance security and observability of cloud native applications and infrastructure

tkmru /awesome-linux-rootkits

a summary of linux rootkits published on GitHub

MalwareSamples /Linux-Malware-Samples

Linux Malware Sample Archive including various types of malicious ELF binaries and viruses. Be careful!

openclarity /vmclarity

VMClarity is a tool for agentless detection and management of Virtual Machine Software Bill Of Materials (SBOM) and vulnerabilities

kkent030315 /NtSymbol

Resolve DOS MZ executable symbols at runtime

scorpiondefense /cyberweapons

Automated Cyber Offense

maldevel /RootKits-List-Download

A curated list of rootkits found on Github and other sites.

therealdreg /lsrootkit

Rootkit Detector for UNIX

sandflysecurity /sandfly-forensic-scripts

Small scripts to help with Linux forensics and incident response.

28Zaaky /Phantom-Rootkit

Usermode Rootkit.

nopn0p /rkorova

ld_preload userland rootkit

sandflysecurity /sandfly-kernel-module-decloak

Scripts to decloak Linux Loadable Kernel Module (LKM) stealth rootkits.

ait-aecid /rootkit-detection-ebpf-time-trace

Detection of rootkit file hiding activities through analysis of shifts in kernel function execution times.

flashnuke /mod-rootkit

Kernel-space x86_64 Linux rootkit leveraging kprobes and ftrace for syscall hooking (hiding entries and reverse shell backdoor)

compilepeace /EVIL_RABBIT

-x-x-x- DO NOT RUN ON PRODUCTION MACHINE -x-x-x- LD_PRELOAD based user-land rootkit for Linux platform.

0xd3xt3r /awesome-windows-rootkits

Collection of windows rootkits

bluedragonsecurity /bds_lkm

Linux Loadable Kernel Module Rootkit for Linux Kernel 5.x up to linux kernel 6.8 on x86_64, hides files, hides process, hides bind shell & reverse shell port, privilege escalation, cleans up logs and bash history during installation

bluedragonsecurity /bds_userland

Linux userland rootkit. Hides file and directory, hides process, hides bind shell port, hides daemon port, hides reverse shell port, cleans up bash history and logs during installation