/awesome-linux-rootkits

awesome-linux-rootkits

Creative Commons Zero v1.0 UniversalCC0-1.0

awesome-linux-rootkits Awesome

🔑 feature table

Environment:

  • CPU architecture
  • Kernel/User mode (or mixed)

Core capabilities:

  • Persistency
  • Management interface
  • Altering system (library) behavior

Stealth capabilities:

  • Detection evasion
  • System logs cleaning (filtering)

Hiding stuff capabilities:

  • Hiding of files and directories
  • Hiding (tampering) of file contents
  • Hiding of processes and process trees
  • Hiding of network connections and activity
  • Hiding of process accounting information (like CPU usage)

Additional functions:

  • Keylogger
  • Backdoor/shell
  • Gaining priveleges

🙈 user mode rootkits

🙉 kernel mode rootkits

🙊 related stuff

Contributing

Please refer the guidelines at contributing.md for details