Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.
- rootkit
- fileless
- av-evasion
71,235 visible repositories in the index
1–2 of 2 · Most stars
Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.
Contains materials for my technical presentation exploring Linux malware tradecraft—from userland and fileless techniques to kernel rootkits, ftrace, eBPF, and defensive strategies.