malware NzT Linux Rootkit

[feature]

Так-как автор продолжает играть умственно-отсталого, а сорцы я купил

Gofile - Cloud Storage Made Simple

Secure, fast and free cloud storage solution. Upload and share files instantly.

gofile.io

NzT Linux Rootkit​

https://xss.pro/threads/79037/

 

[Dread Pirate Roberts]

бегло просмотрел файлы: судя по таймстампам - софт 2018 года; похоже на то, что основная цель софта - VMWare ESXI; также там есть пачка эксплоитов для повышения привилегий и один клёвый "универсальный" в бинарном виде судя по стилю письма в его описании, кажется, я знаю, кто автор
интересный софт, спасибо.
ну и да, скорее всего SeviuM - кидок и продал тебе паблик или перепродал старьё. ни о каком "в одни руки" не может быть и речи.

апдейт: забыл написать, что исходники неполные и основной функционал руткита предоставлен в бинарном виде, так что особой ценности софт не представляет. разве что скомпилированные эксплоиты могут пригодиться, да и то они до 2018го года.

 

[deardexter]

Since the author continues to play the mentally retarded, and I bought the sorts

Gofile - Cloud Storage Made Simple

Secure, fast and free cloud storage solution. Upload and share files instantly.

gofile.io

NzT Linux Rootkit​

https://xss.pro/threads/79037/

link is live again... Any usage tutorial so it will easy for everyone to use this wonderful thing

 

[qwerty1337]

link is live again... Any usage tutorial so it will easy for everyone to use this wonderful thing

Can you reupload please?

 

[Dread Pirate Roberts]

Can you reupload please?

https://files.catbox.moe/efoayx.zip

 

[paijo]

how to make client?

 

[GBLTeam]

How does it work? I mean how to use?

 

[m00r]

а давайте соберем пост с паблик руткитами тут или в новом посте?
вот из старого загашника. мб какие то ссылки не рабочие. Отдельная благодарность тем кто вытащит и закинет на хсс.

GitHub - mempodippy/vlany: Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)

Linux LD_PRELOAD rootkit (x86 and x86_64 architectures) - mempodippy/vlany

github.com

http://www.ussrback.com/UNIX/penetration/rootkits/

GitHub - ciyze0101/Windows-Rootkits

Contribute to ciyze0101/Windows-Rootkits development by creating an account on GitHub.

github.com

Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories, and Whitepapers

packetstormsecurity.com

GitHub - 0xIslamTaha/Python-Rootkit: Python Remote Administration Tool (RAT) to gain meterpreter session

Python Remote Administration Tool (RAT) to gain meterpreter session - 0xIslamTaha/Python-Rootkit

github.com

GitHub - Eterna1/puszek-rootkit: linux rootkit

linux rootkit. Contribute to Eterna1/puszek-rootkit development by creating an account on GitHub.

github.com

GitHub - juxing/AdoreForAndroid: Transplant adore rootkit for Android platform.

Transplant adore rootkit for Android platform. Contribute to juxing/AdoreForAndroid development by creating an account on GitHub.

github.com

https://github.com/HackerFantastic/Public/tree/master/rootkits

GitHub - m0nad/Diamorphine: LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64) - m0nad/Diamorphine

github.com

GitHub - maK-/maK_it-Linux-Rootkit: This is a linux rootkit using many of the techniques described on

This is a linux rootkit using many of the techniques described on - GitHub - maK-/maK_it-Linux-Rootkit: This is a linux rootkit using many of the techniques described on

github.com

Rootkit/Rootkit at master · CDuPlooy/Rootkit

Contribute to CDuPlooy/Rootkit development by creating an account on GitHub.

github.com

GitHub - NexusBots/Umbreon-Rootkit

Contribute to NexusBots/Umbreon-Rootkit development by creating an account on GitHub.

github.com

GitHub - josephjkong/designing-bsd-rootkits: Code from the book "Designing BSD Rootkits: An Introduction to Kernel Hacking"

Code from the book "Designing BSD Rootkits: An Introduction to Kernel Hacking" - josephjkong/designing-bsd-rootkits

github.com

GitHub - Cr4sh/WindowsRegistryRootkit: Kernel rootkit, that lives inside the Windows registry values data

Kernel rootkit, that lives inside the Windows registry values data - Cr4sh/WindowsRegistryRootkit

github.com

Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories, and Whitepapers

packetstormsecurity.com

GitHub - JReFrameworker/JReFrameworker: A practical tool for bytecode manipulation and creating Managed Code Rootkits (MCRs) in the Java Runtime Environment

A practical tool for bytecode manipulation and creating Managed Code Rootkits (MCRs) in the Java Runtime Environment - JReFrameworker/JReFrameworker

github.com

Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories, and Whitepapers

packetstormsecurity.com

Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories, and Whitepapers

packetstormsecurity.com

Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories, and Whitepapers

packetstormsecurity.com

Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories, and Whitepapers

packetstormsecurity.com

Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories, and Whitepapers

packetstormsecurity.com

GitHub - bones-codes/the_colonel: an experimental linux kernel module (rootkit) with a keylogger and built-in IRC bot

an experimental linux kernel module (rootkit) with a keylogger and built-in IRC bot - bones-codes/the_colonel

github.com

https://github.com/x0r1/jellyfish

https://github.com/ecume/simple-rootkit

GitHub - Nervous/GreenKit-Rootkit: GreenKit is an userland rootkit hiding its own files and mining bitcoins on compromised computers. Do /NOT/ download or use this rootkit for malicious purposes. Use it only for your own knowledge.

GreenKit is an userland rootkit hiding its own files and mining bitcoins on compromised computers. Do /NOT/ download or use this rootkit for malicious purposes. Use it only for your own knowledge. ...

github.com

GitHub - cloudsec/brootkit: Lightweight rootkit implemented by bash shell scripts v0.10

Lightweight rootkit implemented by bash shell scripts v0.10 - cloudsec/brootkit

github.com

GitHub - unix-thrust/beurk: BEURK Experimental Unix RootKit

BEURK Experimental Unix RootKit. Contribute to unix-thrust/beurk development by creating an account on GitHub.

github.com

GitHub - NextSecurity/Gozi-MBR-rootkit: Gozi-MBR-rootkit Bootkit Modified

Gozi-MBR-rootkit Bootkit Modified. Contribute to NextSecurity/Gozi-MBR-rootkit development by creating an account on GitHub.

github.com

GitHub - rbertin/basic-rootkit: just a basic rootkit for learning how to playing sys_call_table

just a basic rootkit for learning how to playing sys_call_table - rbertin/basic-rootkit

github.com

GitHub - miagilepner/rickrolly: A Unix rootkit

A Unix rootkit. Contribute to miagilepner/rickrolly development by creating an account on GitHub.

github.com

Linux Rootkits 101 (1 of 3)

Modern Linux Rootkits 101 By Tyler Borland (TurboBorland) Introduction to Linux Rootkits I was told to do a presentation on malware for...

turbochaos.blogspot.gr

GitHub - r00tkillah/HORSEPILL: HORSEPILL rootkit PoC

HORSEPILL rootkit PoC. Contribute to r00tkillah/HORSEPILL development by creating an account on GitHub.

github.com

GitHub - matteomattia/moo_rootkit: it's a simple LKM rootkit.

it's a simple LKM rootkit. Contribute to matteomattia/moo_rootkit development by creating an account on GitHub.

github.com

GitHub - ivyl/rootkit: Sample Rootkit for Linux

Sample Rootkit for Linux. Contribute to ivyl/rootkit development by creating an account on GitHub.

github.com

GitHub - enzolovesbacon/inficere: Mac OS X rootkit - for learning purposes

Mac OS X rootkit - for learning purposes. Contribute to enzolovesbacon/inficere development by creating an account on GitHub.

github.com

GitHub - hiteshd/Android-Rootkit: A rootkit for Android. Based on "Android platform based linux kernel rootkit" from Phrack Issue 68

A rootkit for Android. Based on "Android platform based linux kernel rootkit" from Phrack Issue 68 - hiteshd/Android-Rootkit

github.com

GitHub - QuokkaLight/rkduck: Linux v4.x.x Rootkit

Linux v4.x.x Rootkit. Contribute to QuokkaLight/rkduck development by creating an account on GitHub.

github.com

GitHub - 0xroot-bf/whitesnow: An experimental rootkit for Android

An experimental rootkit for Android. Contribute to 0xroot-bf/whitesnow development by creating an account on GitHub.

github.com

GitHub - mponcet/subversive: x86_64 linux rootkit using debug registers

x86_64 linux rootkit using debug registers. Contribute to mponcet/subversive development by creating an account on GitHub.

github.com

km/src at master · nnewson/km

Rootkit tutorial code for the Beneath C Level blog - http://beneathclevel.blogspot.co.uk/ - nnewson/km

github.com

GitHub - Cr4sh/DrvHide-PoC: Hidden kernel mode code execution for bypassing modern anti-rootkits.

Hidden kernel mode code execution for bypassing modern anti-rootkits. - Cr4sh/DrvHide-PoC

github.com

https://github.com/Christian-Roggia/open-myrtus/tree/master/rootkit

rookit_playground/rootkits at master · muffins/rookit_playground

Educational repository for learning about rootkits and Windows Kernel Hooks. - muffins/rookit_playground

github.com

GitHub - a7vinx/liinux: A linux rootkit works on kernel 4.0.X or higher

A linux rootkit works on kernel 4.0.X or higher. Contribute to a7vinx/liinux development by creating an account on GitHub.

github.com

GitHub - osiris123/CDriver_Loader: Kernel mode driver loader, injecting into the windows kernel, Rootkit. Driver injections.

Kernel mode driver loader, injecting into the windows kernel, Rootkit. Driver injections. - osiris123/CDriver_Loader

github.com

GitHub - varshapaidi/Kernel_Rootkit: Linux Kernel Rootkit - To hide modules and ssh service

Linux Kernel Rootkit - To hide modules and ssh service - varshapaidi/Kernel_Rootkit

github.com

GitHub - karol-gruszczyk/win-rootkit

Contribute to karol-gruszczyk/win-rootkit development by creating an account on GitHub.

github.com

GitHub - hanj4096/wukong: A LKM rootkit for Linux kernel 2.6.x, 3.x and 4.x

A LKM rootkit for Linux kernel 2.6.x, 3.x and 4.x. Contribute to hanj4096/wukong development by creating an account on GitHub.

github.com

GitHub - userpest/rootkit: simple rootkit for computer security class

simple rootkit for computer security class. Contribute to userpest/rootkit development by creating an account on GitHub.

github.com

GitHub - kacheo/KernelRootkit: Linux kernel rootkit to hide certain files and processes.

Linux kernel rootkit to hide certain files and processes. - kacheo/KernelRootkit

github.com

GitHub - rvillordo/libpreload: LD_PRELOAD rootkit

LD_PRELOAD rootkit. Contribute to rvillordo/libpreload development by creating an account on GitHub.

github.com

GitHub - soad003/rootkit

Contribute to soad003/rootkit development by creating an account on GitHub.

github.com

GitHub - NinnOgTonic/Out-of-Sight-Out-of-Mind-Rootkit: Rootkit

Rootkit . Contribute to NinnOgTonic/Out-of-Sight-Out-of-Mind-Rootkit development by creating an account on GitHub.

github.com

GitHub - W4RH4WK/THOR: The Horrific Omnipotent Rootkit

The Horrific Omnipotent Rootkit. Contribute to W4RH4WK/THOR development by creating an account on GitHub.

github.com

GitHub - ring-1/zendar: Zendar is a Linux rootkit based off of the LD_PRELOAD method used by Azazel and Jynx alike

Zendar is a Linux rootkit based off of the LD_PRELOAD method used by Azazel and Jynx alike - ring-1/zendar

github.com

GitHub - amanone/amark: lkm rootkit

lkm rootkit. Contribute to amanone/amark development by creating an account on GitHub.

github.com

GitHub - majdi/deadlands: 🐧 A simple kernel-level rootkit

🐧 A simple kernel-level rootkit. Contribute to majdi/deadlands development by creating an account on GitHub.

github.com

GitHub - cccssw/JynKbeast: A novel rootkit under linux(test under cents 5.4) combine with preload_inject and sys_table modify

A novel rootkit under linux(test under cents 5.4) combine with preload_inject and sys_table modify - cccssw/JynKbeast

github.com

GitHub - joshimhoff/toykit: A toy Linux rootkit.

A toy Linux rootkit. Contribute to joshimhoff/toykit development by creating an account on GitHub.

github.com

https://github.com/pasv/Z34107

GitHub - maK-/Keylogger-lkm: This is a very simple Keylogger, it doesn't hide itself and is a college project building towards developing a rootkit.

This is a very simple Keylogger, it doesn't hide itself and is a college project building towards developing a rootkit. - maK-/Keylogger-lkm

github.com

GitHub - DataKinds/syscall-rootkit: Just a proof of concept Linux rootkit that reads from syscalls.

Just a proof of concept Linux rootkit that reads from syscalls. - DataKinds/syscall-rootkit

github.com

GitHub - schischi/slrk: Linux rootkit experimentations

Linux rootkit experimentations. Contribute to schischi/slrk development by creating an account on GitHub.

github.com

Alina/Rootkit at master · bhassani/Alina

Alina POS Source Code + Rootkit. Contribute to bhassani/Alina development by creating an account on GitHub.

github.com

https://github.com/jiayy/lkm-rootkit

https://github.com/ChristianPapathanasiou/apache-rootkit

https://github.com/ChristianPapathanasiou/DEFCON-18-Android-rootkit-Mindtrick

GitHub - elfmaster/kprobe_rootkit: Linux kernel rootkit using kprobes (From http://phrack.org/issues/67/6.html)

Linux kernel rootkit using kprobes (From http://phrack.org/issues/67/6.html) - elfmaster/kprobe_rootkit

github.com

GitHub - ah450/rootkit: A rootkit for linux kernel >= 3.0

A rootkit for linux kernel >= 3.0. Contribute to ah450/rootkit development by creating an account on GitHub.

github.com

GitHub - Jyang772/HideProcessHookMDL: A simple rootkit to hide a process

A simple rootkit to hide a process. Contribute to Jyang772/HideProcessHookMDL development by creating an account on GitHub.

github.com

GitHub - aidielse/Rootkits-Playground: fun rootkits stuff!

fun rootkits stuff! Contribute to aidielse/Rootkits-Playground development by creating an account on GitHub.

github.com

GitHub - dluengo/yarr: Yet Another Repetitive Rootkit

Yet Another Repetitive Rootkit. Contribute to dluengo/yarr development by creating an account on GitHub.

github.com

https://github.com/NotALaser/trk

GitHub - D0m1n0/rootkits

Contribute to D0m1n0/rootkits development by creating an account on GitHub.

github.com