Stuxnet extracted binaries by reversing & Stuxnet Rootkit Analysis

Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.

Cerez 😈 userland LD_PRELOAD rootkit

The Never-Ending Hide and Seek: The Tale of APTX4869 Rootkit

Rootkit for Windows 32-bit

Windows kernel rootkit for the highschool's cyber track

A rootkit for Windows 32-bit, for testing and educational purposes only. Has the ability to modify files and hide processes.

Architecture internals learning path from Open Security Training, provides a set of resources to complete the learning path, includes code-base, videos, techniques, useful articles and concepts to understand the courses.

A kernel module designed to intercept system calls to hide the subversive behaviors of another program

A Proof-of-Concept Project prepared for Rootkit Analysis

Source code for a Linux kernel root kit we wrote for a practical course back in university.