Kernel-Process-Hollowing
Windows x64 kernel mode rootkit process hollowing POC. (by XaFF-XaFF)
Black-Angel-Rootkit
Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality. (by XaFF-XaFF)
| Kernel-Process-Hollowing | Black-Angel-Rootkit | |
|---|---|---|
| 1 | 2 | |
| 176 | 568 | |
| - | - | |
| 5.2 | 4.4 | |
| 11 months ago | 6 months ago | |
| C++ | C++ | |
| MIT License | GNU General Public License v3.0 only |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Kernel-Process-Hollowing
Posts with mentions or reviews of Kernel-Process-Hollowing.
We have used some of these posts to build our list of alternatives
and similar projects.
Black-Angel-Rootkit
Posts with mentions or reviews of Black-Angel-Rootkit.
We have used some of these posts to build our list of alternatives
and similar projects.
What are some alternatives?
When comparing Kernel-Process-Hollowing and Black-Angel-Rootkit you can also consider the following projects:
Nidhogg - Nidhogg is an all-in-one simple to use rootkit.
inline_syscall - Inline syscalls made easy for windows on clang
Jormungandr - Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.
ZwProcessHollowing - ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption