Android aarch64 kernel driver module providing efficient memory operations, touch simulation and IPC. Features include fast memory remapping.

Stuxnet extracted binaries by reversing & Stuxnet Rootkit Analysis

Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.

Cerez 😈 userland LD_PRELOAD rootkit

Author of Project Adrishya a rootkit which use ftrace mechanism to hook syscall; (write this because God commanded me); work for both x86_64 and arm; CREDIT-(Oleksii Lozovskyi{ilammy})FOUNDER OF FTRACE HOOKING

A windows 11 rootkit in Rust

End-to-end simulation of a Python dependency confusion attack, sudo privilege escalation (CVE-2025-32463), and rootkit-based persistence - with full memory and network forensic analysis.

Rootkit for Windows 32-bit

Windows kernel rootkit for the highschool's cyber track

Architecture internals learning path from Open Security Training, provides a set of resources to complete the learning path, includes code-base, videos, techniques, useful articles and concepts to understand the courses.

A rootkit for Windows 32-bit, for testing and educational purposes only. Has the ability to modify files and hide processes.

Source code for a Linux kernel root kit we wrote for a practical course back in university.

A kernel module designed to intercept system calls to hide the subversive behaviors of another program

A Proof-of-Concept Project prepared for Rootkit Analysis