ibreiten Goto Github PK

amber

Reflective PE packer.

azazel

Azazel is a userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily around anti-debugging and anti-detection.

botnet

Botnet

cloudsec-research

the core papers i researched about kernel security.

cub3

Proof of concept for LD_PRELOAD malware that uses extended attributes to protect files.

detect_preload

Small C application designed to detect LD_PRELOAD malware via the libdl library functions.

diamorphine

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x

irc-bots

malicious codes to irc (for educational purposes)

isowall

This is a mini-firewall that completely isolates a target device from the local network.

jynx2

JynxKit2 is an LD_PRELOAD userland rootkit based on the original JynxKit. The backdoor has been replaced with an "accept()" system hook.

movfuscator

The single instruction C compiler

odessa

Very basic example of an IRC bot to manage a channel (written in C).

research-rootkit

LibZeroEvil & the Research Rootkit project.

smhasher

Automatically exported from code.google.com/p/smhasher

suterusu

An LKM rootkit targeting Linux 2.6/3.x on x86(_64), and ARM

truecrypt-verified-mirror

Verified Windows, OSX, Linux TrueCrypt v. 7.1a binaries and source files

umbreon-rootkit

vlany

Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)

wukong

A LKM rootkit for Linux kernel 2.6.x, 3.x and 4.x

xingyiquan-rc

xingyiquan-rc is a linux loadable kernel module that behaves as a kernel rootkit for linux kernel 2.6 and linux kernel 3.x