1.m0nad / DiamorphineLKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)rootkitlkm-rootkitckernelkernel-modulesecurity-tools+14 moreCOther license2.5K total483 forks+194 starsfrom 2,293 · score 5.27
2.h3xduck / TripleCrossA Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.backdoorebpfkernelrootkitsecuritylibbpfCGPL-3.02K total243 forks+47 starsfrom 1,945 · score 3.87
3.Gui774ume / ebpfkitebpfkit is a rootkit powered by eBPFebpfsecurityrootkitlinuxlinux-kernellinux-kernel-hacking+2 moreCAPACHE-2.0866 total96 forks+27 starsfrom 839 · score 3.33
4.Gui774ume / ebpfkit-monitorebpfkit-monitor is a tool that detects and protects against eBPF powered rootkitslinuxsecuritykernelrootkitlinux-kernelebpf+2 moreCAPACHE-2.0145 total18 forks+4 starsfrom 141 · score 1.61