🍂 Android aarch64 kernel driver module providing efficient memory operations, touch simulation and IPC. Features include fast memory remapping.

Stuxnet extracted binaries by reversing & Stuxnet Rootkit Analysis

Author of Project Adrishya a rootkit which use ftrace mechanism to hook syscall; (write this because God commanded me); work for both x86_64 and arm; CREDIT-(Oleksii Lozovskyi{ilammy})FOUNDER OF FTRACE HOOKING

Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.

A windows 11 rootkit in Rust

End-to-end simulation of a Python dependency confusion attack, sudo privilege escalation (CVE-2025-32463), and rootkit-based persistence - with full memory and network forensic analysis.

Rootkit for Windows 32-bit

Framework built with LibVMI to collect indicators of Linux kernel-mode rootkit detection.

Architecture internals learning path from Open Security Training, provides a set of resources to complete the learning path, includes code-base, videos, techniques, useful articles and concepts to understand the courses.

Windows kernel rootkit for the highschool's cyber track

A rootkit for Windows 32-bit, for testing and educational purposes only. Has the ability to modify files and hide processes.

A Proof-of-Concept Project prepared for Rootkit Analysis

This project uses the SetVariable() hook to store the rootkit payload in hidden memory.

Source code for a Linux kernel root kit we wrote for a practical course back in university.

A kernel module designed to intercept system calls to hide the subversive behaviors of another program