C rootkit

Open-source C projects categorized as rootkit
Edit details
Linux Kernel Security linux-kernel Ebpf
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured

Top 11 C rootkit Projects

C logo
rootkit

  1. TitanHide

    Hiding kernel-driver for x86/x64.

  2. SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo

  3. Diamorphine

    LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

  4. r77-rootkit

    Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

  5. TripleCross

    A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

  6. Singularity

    Stealthy Linux Kernel Rootkit for modern kernels (6x) (by MatheuZSecurity)

    Project mention: The Kernel's Blind Spot: Deconstructing the Advanced Techniques of the Singularity Rootkit | dev.to | 2026-01-27

    View the Project on GitHub

  7. ebpfkit

    ebpfkit is a rootkit powered by eBPF

  8. arm64_silent_syscall_hook

    silent syscall hooking without modifying sys_call_table/handlers via patching exception handler

  9. ebpfkit-monitor

    ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits

  10. WSAAcceptBackdoor

    Winsock accept() Backdoor Implant.

  11. BlackOps-Armarda

    an armarda of tools for stealthily infiltration and post exploitation

  12. HiddenGhost

    HiddenGhost is an new solution for find system call table with support for 5.7x kernels +

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

C rootkit discussion

Log in or Post with

C rootkit related posts

  • LKM Addict, learning the basics of lkm

    2 projects | dev.to | 8 Oct 2024

  • TripleCross – Linux eBPF Rootkit

    1 project | news.ycombinator.com | 10 Jul 2022

  • GitHub - h3xduck/TripleCross: A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

    1 project | /r/devopsish | 7 Jul 2022

  • Show HN: TripleCross – A Linux eBPF rootkit with a C2 system and more

    1 project | news.ycombinator.com | 6 Jul 2022

  • Show HN: Credentials dumper for Linux using eBPF

    5 projects | news.ycombinator.com | 5 Jul 2022

  • TripleCross: A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

    1 project | /r/linux | 5 Jul 2022

  • TripleCross: A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

    1 project | /r/cybersecurity | 5 Jul 2022
  • A note from our sponsor - SaaSHub
    www.saashub.com | 12 Jun 2026
    SaaSHub helps you find the best software and product alternatives Learn more →

Index

What are some of the best open-source rootkit projects in C? This list will help you:

# Project Stars
1 TitanHide 2,753
2 Diamorphine 2,361
3 r77-rootkit 2,149
4 TripleCross 1,952
5 Singularity 1,687
6 ebpfkit 844
7 arm64_silent_syscall_hook 153
8 ebpfkit-monitor 141
9 WSAAcceptBackdoor 119
10 BlackOps-Armarda 5
11 HiddenGhost 5

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com

Did you know that C is
the 6th most popular programming language
based on number of references?

Loading...