Trending Tags Repositories Insights Dependencies Withheld

/

Trending Tags Repositories Insights Dependencies Withheld

Trending repositories

Ranked by Attention Score: stars gained over the last 90 complete days

Period

Sort order

Topics: rootkit

Topics

Search topics

No listed topic matches. Press Enter to filter by “”.

Tag

Filters

Apply

Filters

Primary language

License

Total stars

Last push

Created

Archived

Clear all filters

4 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)

Topic: rootkit

1.m0nad / Diamorphine

LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)

rootkit
lkm-rootkit
c
kernel
kernel-module
security-tools
+14 more

C Other license2.5K total483 forks

+77 stars

from 2,410 · score 4.36

2.h3xduck / TripleCross

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

backdoor
ebpf
kernel
rootkit
security
libbpf

C GPL-3.02K total243 forks

+24 stars

from 1,968 · score 3.22

3.Gui774ume / ebpfkit

ebpfkit is a rootkit powered by eBPF

ebpf
security
rootkit
linux
linux-kernel
linux-kernel-hacking
+2 more

C APACHE-2.0866 total96 forks

+15 stars

from 851 · score 2.77

4.Gui774ume / ebpfkit-monitor

ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits

linux
security
kernel
rootkit
linux-kernel
ebpf
+2 more

C APACHE-2.0145 total18 forks

+3 stars

from 142 · score 1.39

Order: Attention Score

Most net stars gained in the window first. The score only puts this gain on a log scale, so the order is the order of the gain.

How the ranking works

Ranked by stars gained in the window. The score is the natural log of one plus that gain, so a repository's rank is exactly its star gain's rank.

score = log1p(net stars gained in the trailing T complete UTC days)

A repository is ranked only when its Star History covers every day of the window and its latest Observation is not missing.

The longest window is 180 days. Star History from the Repository Host goes back at most 180 days before a repository's first Observation. A longer window needs more days of Observations first. A repository younger than the window is not ranked in it.

The filters narrow the same eligible repositories. A repository matches the topics when it has any of them. Total stars is the count now. Last push and creation on the Repository Host count back from the start of today (UTC). The counts beside the languages, licenses, and topics include all ranked repositories in the window. A Tag holds the repositories that have it; see Tags.

Repositories enter the index from the Seed Dataset or by gaining stars faster than the published admission threshold, whatever their size. Admission is permanent, so an archived repository can still rank.

Browse the Repository Index

Trending Tags Repositories Insights Dependencies Withheld Withholding Rule Health facts Privacy Send feedback

Powered by Workhorse · From the makers of AwesomeRepos