Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.
BSD-2-CLAUSE License
BlackLotus UEFI Windows Bootkit
A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) throu...
LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)
Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/im...