COLLECTED BY

Organization: Archive Team

Formed in 2009, the Archive Team (not to be confused with the archive.org Archive-It Team) is a rogue archivist collective dedicated to saving copies of rapidly dying or deleted websites for the sake of history and digital heritage. The group is 100% composed of volunteers and interested parties, and has expanded into a large amount of related projects for saving online and digital history.

History is littered with hundreds of conflicts over the future of a community, group, location or business that were "resolved" when one of the parties stepped ahead and destroyed what was there. With the original point of contention destroyed, the debates would fall to the wayside. Archive Team believes that by duplicated condemned data, the conversation and debate can continue, as well as the richness and insight gained by keeping the materials. Our projects have ranged in size from a single volunteer downloading the data to a small-but-critical site, to over 100 volunteers stepping forward to acquire terabytes of user-created data to save for future generations.

The main site for Archive Team is at archiveteam.org and contains up to the date information on various projects, manifestos, plans and walkthroughs.

This collection contains the output of many Archive Team projects, both ongoing and completed. Thanks to the generous providing of disk space by the Internet Archive, multi-terabyte datasets can be made available, as well as in use by the Wayback Machine, providing a path back to lost websites and work.

Our collection has grown to the point of having sub-collections for the type of data we acquire. If you are seeking to browse the contents of these collections, the Wayback Machine is the best first stop. Otherwise, you are free to dig into the stacks to see what you may find.

The Archive Team Panic Downloads are full pulldowns of currently extant websites, meant to serve as emergency backups for needed sites that are in danger of closing, or which will be missed dearly if suddenly lost due to hard drive crashes or server failures.

Collection: Archive Team: URLs

TIMESTAMPS

The Wayback Machine - https://web.archive.org/web/20220710045145/https://github.com/topics/rootkit

#

rootkit

Here are 178 public repositories matching this topic...

ExpLife0011 / awesome-windows-kernel-security-development

windows kernel security development

framework rootkit driver antivirus shellcode bootkit antirootkit

Updated Feb 18, 2022

xl7dev / WebShell

Webshell && Backdoor Collection

shell backdoor rootkit webshell

Updated Apr 6, 2020
PHP

JKornev / hidden

🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc

windows security registry kernel rootkit driver rce malware-analysis

Updated Feb 26, 2022
C

milabs / awesome-linux-rootkits

awesome-linux-rootkits

linux awesome rootkit linux-kernel awesome-list lkm-rootkit

Updated Jul 8, 2022

m0nad / Diamorphine

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x (x86/x86_64 and ARM64)

Updated Jan 19, 2022
C

d30sa1 / RootKits-List-Download

This is the list of all rootkits found so far on github and other sites.

rootkit rootkits redteam offensive-scripts

Updated Apr 28, 2022

mempodippy / vlany

Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)

c linux cli library debian rootkit ldpreload dynamic linker userland preload tui libc reboot libpcap libdl libpam libssl shared

Updated Dec 11, 2020
C

bytecode77 / r77-rootkit

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

rootkit av-evasion fileless

Updated Jun 21, 2022
C++

jm33-m0 / emp3r0r

Linux/Windows post-exploitation framework made by linux user

linux rootkit malware rat post-exploitation stealth hacking-tool local-privilege-escalation redteaming redteam trojan-malware emp3r0r cve-2021-4034

Updated Jun 9, 2022
Go

nurupo / rootkit

Sponsor

Linux rootkit for Ubuntu 16.04 and 10.04 (Linux Kernels 4.4.0 and 2.6.32), both i386 and amd64

kernel-module rootkit linux-kernel-module linux-rootkit

Updated Jul 5, 2019
C

h3xduck / TripleCross

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

security kernel backdoor rootkit ebpf libbpf

Updated Jul 6, 2022
C

screetsec / Vegile

This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in metasploit and transparent. Even when it killed, it will re-run again. There always be a procces which while run another process,So we can assume that this procces is unstopable like a Ghost in The Shell

linux backdoor rootkit infinite-scroll postgresql ghost indonesia inject post-exploitation msfvenom unlimited metasploit

Updated Mar 9, 2020
Shell

XaFF-XaFF / Cronos-Rootkit

Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.

kernel rootkit x64 windows-10 ring0 windows-11 windows-rootkits

Updated Mar 29, 2022
C++

hvmi

hvmi / hvmi

Hypervisor Memory Introspection Core Library

protection exploit memory rootkit hypervisor introspection

Updated Feb 17, 2022
C

Cr4sh / s6_pcie_microblaze

PCI Express DIY hacking toolkit for Xilinx SP605. This repository is also home of Hyper-V Backdoor and Boot Backdoor, check readme for links and info

kernel fpga backdoor rootkit hypervisor uefi xilinx hyper-v dma microblaze pci-e

Updated May 26, 2021
C

Cr4sh / WindowsRegistryRootkit

Kernel rootkit, that lives inside the Windows registry values data

windows registry kernel backdoor exploit rootkit malware meterpreter anti-forensics ndis metasploit file-less

Updated Oct 8, 2017
C

landhb / HideProcess

A basic Direct Kernel Object Manipulation rootkit that removes a process from the EPROCESS list, hiding it from the Task Manager

rootkit kernel-driver dkom old-school

Updated Mar 26, 2019
C

Idov31 / Nidhogg

Nidhogg is an all-in-one simple to use rootkit for red teams.

windows kernel cpp rootkit cybersecurity infosec cyber-security red-team redteam windows-rootkits

Updated Jul 9, 2022
C++

Gui774ume / ebpfkit

ebpfkit is a rootkit powered by eBPF

linux security kernel rootkit linux-kernel ebpf linux-kernel-hacking runtime-security

Updated Aug 5, 2021
C

CoolerVoid / HiddenWall

Tool to generate a Linux kernel module for custom rules with Netfilter hooking. (block ports, Hidden mode, firewall functions)

kernel-module rootkit firewall netfilter network-programming cyber-security ansi-c

Updated Apr 24, 2022
C

jivoi / openssh-backdoor-kit

💣 just for fun ¯\_(ツ)_/¯

backdoor rootkit sshd

Updated Sep 21, 2016
Shell

FiYHer / InfinityHookPro

InfinityHookPro Win7 -> Win11 latest

hook kernel rootkit driver win10 patchguard win7 win8 win11 infinityhook

Updated Dec 7, 2021
C++

Paradoxis / PHP-Backdoor

Your interpreter isn’t safe anymore — The PHP module backdoor

c php rootkit php-module php-rootkit

Updated Mar 25, 2019
C

hiteshd / Android-Rootkit

A rootkit for Android. Based on "Android platform based linux kernel rootkit" from Phrack Issue 68

android rootkit android-rootkit

Updated Jun 15, 2015
C

kkamagui / shadow-box-for-x86

Shadow-Box: Lightweight and Practical Kernel Protector for x86 (Presented at BlackHat Asia 2017/2018, beVX 2018 and HITBSecConf 2017)

linux kernel rootkit hypervisor blackhat hitbsecconf bevx

Updated Jun 24, 2019
C

sad0p / d0zer

Elf binary infector written in Go.

linux virus rootkit elf-binaries

Updated May 8, 2022
Go

croemheld / lkm-rootkit

A LKM rootkit for most newer kernel versions.

kernel rootkit linux-kernel kernel-modules

Updated Sep 17, 2017
C

emcruise / tor-rootkit

A Python 3 standalone Windows 10 / Linux Rootkit using Tor.

security reverse-shell rootkit tor windows-10 rat pentesting hidden-services pentesting-python remote-administration-tool python3-rootkit tor-expert-bundle

Updated Jun 9, 2022
Python

tkmru / awesome-linux-rootkits

a summary of linux rootkits published on GitHub

linux rootkit awesome-list rootkits

Updated May 7, 2020

EgeBalci / WSAAcceptBackdoor

Winsock accept() Backdoor Implant.

windows shell backdoor rootkit pentest winsock redteam implant winsock2

Updated Feb 13, 2021
C

Improve this page

Add a description, image, and links to the rootkit topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the rootkit topic, visit your repo's landing page and select "manage topics."