A Super Meta Mod for DDLC which take Monika into Ring0

User mode rootkit that takes advantage of System32 mock directory and DLL Hijacking. Created for education purposes and not to be distributed.

PoCs for Kernelmode rootkit techniques research.

Windows Kernel Rootkit in Rust

Linux kernel rootkit

AngryVirus is a dangerous, closed-source virus with advanced capabilities: it bypasses UAC, embeds a rootkit, infects the MBR, distorts the screen with GDI effects, and plays eerie ByteBeat sounds. Created by **ABOLHB**. Use with extreme caution ☠️

Simple file hiding kernel rootkit for Linux v6

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

A x64 Windows Rootkit using SSDT or Hypervisor hook

In-Memory Rootkit For Linux

Cheat sheet to detect and remove linux kernel rootkit

Linux/Windows post-exploitation framework made by linux user

💎 A utility for unhooking DLLs from remote processes, enabling debugging and modification of running applications. 💎

Now You See Me, Now You Don't

AttackMate is an attack orchestration tool that executes full attack-chains based on playbooks.

A Proof-of-Concept Project prepared for Rootkit Analysis

SMM driver/rootkit for platform memory access with R3 <-> R0 <-> R-2 communication.

A ring0 Loadable Kernel Module (Linux) to log all commnds run on the system.