Diamorphine
dtrace-utils
Our great sponsors
Diamorphine | dtrace-utils | |
---|---|---|
1 | 1 | |
1,661 | 113 | |
- | - | |
3.0 | 7.9 | |
7 months ago | 15 days ago | |
C | C | |
GNU General Public License v3.0 or later | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Diamorphine
-
GitHub - jafarlihi/modreveal: Utility to find hidden Linux kernel modules
Looks like it can be used to detect the linked rootkit https://github.com/m0nad/Diamorphine
dtrace-utils
-
Linux 5.14 Can Create Secret Memory Areas with Memfd_secret
Was referring to https://github.com/oracle/dtrace-utils/tree/2.0-branch-dev
Will DTrace (built on ebpf.io) access these memfd_secret regions?
What are some alternatives?
Dimorf - Dimorf is a ransomware using 256-bit AES with a self-destructing, randomly generated key for Linux OS´s
ltp - Linux Test Project (mailing list: https://lists.linux.it/listinfo/ltp)
RecycledInjector - Native Syscalls Shellcode Injector
linux - XanMod: Linux kernel source code tree
HiddenWall - Linux kernel module generator for Hidden firewall that follows the rules in the external YAML file.
zenpower - Zenpower is Linux kernel driver for reading temperature, voltage(SVI2), current(SVI2) and power(SVI2) for AMD Zen family CPUs.
htkit - Information Gathering Simplified.
ebpfkit - ebpfkit is a rootkit powered by eBPF
casper-fs - Casper-fs is a Custom Hidden Linux Kernel Module generator. Each module works in the file system to protect and hide secret files.
cacule-cpu-scheduler - The CacULE CPU scheduler is based on interactivity score mechanism. The interactivity score is inspired by the ULE scheduler (FreeBSD scheduler).
skiboot - OPAL boot and runtime firmware for POWER
honey-potion - Writing eBPF programs with Elixir!