A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
Repository Index
47,133 repositories indexed
1–4 of 4 · Most stars
A stealthy process injection PoC combining Thread Name-Calling for payload delivery with Waiting Thread Hijacking for execution, with zero cross-process writes.
Encrypts 64-bit elf files that decrypt at runtime.
- elf64
- linux
- elf-binaries
- elf-parser
ELF packer - encrypt and inject self-decryption code into executable ELF binary target
- 42
- elf
- injection
- shellcode