Cerez 😈 userland LD_PRELOAD rootkit

A LKM (Loadable Kernel Module) to execute a command as root; I include a example of using netcat and a compiled(with source and steps on how to compile) reverse shell provided in C.

The Never-Ending Hide and Seek: The Tale of APTX4869 Rootkit

Experimental program that detects files & directories hidden by Linux trojan/rootkits

Linux Loadable Kernel Module Rootkit for Linux Kernel 5.x and 6.x on x86_64, hides files, hides process, hides bind shell & reverse shell port, privilege escalation, cleans up logs and bash history during installation

Linux userland rootkit. Hides file and directory, hides process, hides bind shell port, hides daemon port, hides reverse shell port, cleans up bash history and logs during installation

Rootkit Detector for UNIX

An Nginx module for persistent privileged malware

ld_preload userland rootkit

-x-x-x- DO NOT RUN ON PRODUCTION MACHINE -x-x-x- LD_PRELOAD based user-land rootkit for Linux platform.

Rootkit breaker - experimental Linux anti-rootkit tool based on kprobes

Automated Cyber Offense