HTTPS C&C Framework with encrypted beacons, web dashboard, and Windows agent.
-
Updated
Feb 5, 2026 - Python
HTTPS C&C Framework with encrypted beacons, web dashboard, and Windows agent.
AttackMate is an attack orchestration tool that executes full attack-chains based on playbooks.
Hanoman is an GUI antivirus engine sigature based detection 🐒
Управление компьютером через телеграмм бота
Collaborative malware exchange repository.
Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.
Super user's toolkit
This repository contains a variety of plugins and scripts, related to the Volatility framework.
Autonomous malware analysis + rootkit/bootkit forensics: detonate → triangulated verdict (behavior + YARA + VirusTotal) → auto-generated detection. Pure-Python, human-gated, tested.
Linux LKM rootkit engine for authorized red-team labs — pt_regs syscall hooks, CR0.WP-pinning bypass, file/PID/port hiding, keylogger, magic-packet backdoor, give-root. Go + Python CLIs, JSON contract, CI vs 5.15/6.8. Educational use only.
This Linux rootkit project comprises Commander and Victim programs facilitating covert communication through encrypted channels. Leveraging features like keylogging, file transfer, and remote program execution, it provides a controlled and secure means of interacting with a Linux system.
A Proof-of-Concept Project prepared for Rootkit Analysis
Dual-Pipeline TF-IDF Semantic LLM–QINN and DECMO–DenseNet Framework for Detecting Hooking-Based Android Malware in APK Squatting Attacks
Python tabanlı siber güvenlik araçları koleksiyonu.
👻 Rootkit development & detection research | Kernel-level persistence | NullSec Framework | @anonantics
Provide a Windows GUI to connect to the Tor network with automatic bridge support, proxy setup, and exit node filtering.
To associate your repository with the rootkit topic, visit your repo's landing page and select "manage topics."