Android aarch64 kernel driver module providing efficient memory operations, touch simulation and IPC. Features include fast memory remapping.
-
Updated
Aug 25, 2025 - C
#
rootkit-kernel
Here are 15 public repositories matching this topic...
Sort: Most stars
Sort options
Stuxnet extracted binaries by reversing & Stuxnet Rootkit Analysis
kernel rootkit reverse-engineering malware driver malware-analysis malware-research malware-development zero-day stuxnet stuxnet-source stuxnet-memory-analysis rootkit-kernel stuxnet-report
-
Updated
Sep 14, 2024 - C
Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.
linux rootkit incident-response malware intrusion-detection blueteam malware-detection rootkit-hunter incident-response-tooling rootkit-kernel
-
Updated
Sep 29, 2025 - Python
Author of Project Adrishya a rootkit which use ftrace mechanism to hook syscall; (write this because God commanded me); work for both x86_64 and arm; CREDIT-(Oleksii Lozovskyi{ilammy})FOUNDER OF FTRACE HOOKING
linux arm rootkit linux-kernel hacking cybersecurity device-driver arm64 linux-kernel-module malware-development low-level-programming kprobes linux-device-drivers linux-rootkit lkm-rootkit syscall-hooking rootkit-kernel ftrace-rootkit lkm-hacking ftrace-hooking
-
Updated
Sep 19, 2025 - C
A windows 11 rootkit in Rust
rootkit windows-kernel security-research edr windows-kernel-exploitation windows-rootkits edr-evasion rootkit-kernel windows-rootkit rootkit-windows rust-rootkit
-
Updated
Mar 23, 2025 - Rust
End-to-end simulation of a Python dependency confusion attack, sudo privilege escalation (CVE-2025-32463), and rootkit-based persistence - with full memory and network forensic analysis.
reverse-engineering digital-forensics linux-kernel-module rootkit-kernel dependency-confusion-attack cve-2025-32463
-
Updated
Jul 20, 2025 - C
Framework built with LibVMI to collect indicators of Linux kernel-mode rootkit detection.
linux rootkit detection xen virtualization linux-kernel malware-detection rootkits vmi rootkit-kernel
-
Updated
Oct 19, 2025 - C
Rootkit for Windows 32-bit
cpp rootkit malware windows-kernel malware-development kernel-development elliotalderson51 kernel-rootkit windows-kernel-hook rootkit-kernel windows-rootkit rootkit-windows windows-32-bit cpp-kernel-development
-
Updated
Oct 7, 2021 - C++
Windows kernel rootkit for the highschool's cyber track
-
Updated
May 12, 2023 - C++
Architecture internals learning path from Open Security Training, provides a set of resources to complete the learning path, includes code-base, videos, techniques, useful articles and concepts to understand the courses.
-
Updated
Feb 16, 2023 - C
Bypassing PatchGuard at Runtime - Windows 11 25H2
-
Updated
Feb 15, 2026 - C
A rootkit for Windows 32-bit, for testing and educational purposes only. Has the ability to modify files and hide processes.
-
Updated
Jan 22, 2024 - C++
A Proof-of-Concept Project prepared for Rootkit Analysis
-
Updated
Feb 24, 2026 - Python
Source code for a Linux kernel root kit we wrote for a practical course back in university.
-
Updated
Nov 27, 2021 - C
A kernel module designed to intercept system calls to hide the subversive behaviors of another program
-
Updated
May 4, 2023 - Batchfile
Improve this page
Add a description, image, and links to the rootkit-kernel topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the rootkit-kernel topic, visit your repo's landing page and select "manage topics."