样本分析报告

AV/EDR evasion via direct system calls.

Duke ece 650 homework

Fileless attack with persistence

clearing traces of a loaded driver

Latest "private" version of PhantomCrypt.

PoC Rootkit targeting Linux-PAM

Process path modification x64

Kernel-level rootkit developed for Windows 11.

Simple file hiding kernel rootkit for Linux v6

💎 A utility for unhooking DLLs from remote processes, enabling debugging and modification of running applications. 💎

Easily add an NSA backdoor into your Rails app.

A Simple rootkit

Using Driver Global Injection dll, it can hide DLL modules

使用MFC编写的病毒技术合集

Changing values to bypass windows defender C#

Feature-rich interactive rootkit that targets Linux kernel 4.19. Accompanied by a dynamic kernel memory analysis and type interpretation GDB plugin for in vivo VM introspection (e.g. using QEMU).

A kernel mode rootkit for NT.

A simple Linux rootkit written in C which can hide files inside it's directory.

Driver loader for bypassing Windows x64 Driver Signature Enforcement