Diamorphine
reveng_rtkit
Our great sponsors
Diamorphine | reveng_rtkit | |
---|---|---|
1 | 2 | |
1,661 | 206 | |
- | - | |
3.0 | 4.1 | |
7 months ago | 7 months ago | |
C | C | |
GNU General Public License v3.0 or later | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Diamorphine
-
GitHub - jafarlihi/modreveal: Utility to find hidden Linux kernel modules
Looks like it can be used to detect the linked rootkit https://github.com/m0nad/Diamorphine
reveng_rtkit
-
LKM based Rootkit: reveng_rtkit
LINK: https://github.com/reveng007/reveng_rtkit
- Introducing reveng_rtkit (LKM based Rootkit) targeting Linux OS capable of hiding itself, processes/implants and more. Most functionalities are same as famous diamorphine Rootkit, especially syscall interception, other functionalities are achieved differently, to bypass signature based antirootkits
What are some alternatives?
Dimorf - Dimorf is a ransomware using 256-bit AES with a self-destructing, randomly generated key for Linux OS´s
libiio - A cross platform library for interfacing with local and remote Linux IIO devices
RecycledInjector - Native Syscalls Shellcode Injector
kdai - kdai(Kernel Dynamic ARP Inspection) is a linux kernel module to defend against arp cache poisoning
HiddenWall - Linux kernel module generator for Hidden firewall that follows the rules in the external YAML file.
lkm-sandbox - Collection of Linux Kernel Modules and PoC to discover, learn and practice Linux Kernel Development
htkit - Information Gathering Simplified.
SmmBackdoorNg - Updated version of System Management Mode backdoor for UEFI based platforms: old dog, new tricks
casper-fs - Casper-fs is a Custom Hidden Linux Kernel Module generator. Each module works in the file system to protect and hide secret files.
OctopusWAF - OctopusWAF is a WAF( Web application firewall) with high performance, made in C language and use libevent.
skiboot - OPAL boot and runtime firmware for POWER
intel_nuc_led - Intel NUC7i[x]BN and NUC6CAY LED Control for Linux