Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.
Repository Index
67,762 visible repositories in the index
1–3 of 3 · Most stars
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Contains materials for my technical presentation exploring Linux malware tradecraft—from userland and fileless techniques to kernel rootkits, ftrace, eBPF, and defensive strategies.