ossec / ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

Idov31 / Nidhogg

Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.

rootkit-io / awesome-malware-development

Curated resources for malware dev, reverse engineering, and defensive security research.

MatheuZSecurity / Singularity

Stealthy Linux Kernel Rootkit

jm33-m0 / emp3r0r

Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents.

carloslack / KoviD

Red-Team LKM

KSwordDEV / KSword

[Windows Anti-Rootkit] KSword 5.1 is an source-available Windows toolkit for ARK, kernel debugging, and system forensics. KSword 5.1 是面向 Windows 的源码可见 ARK、内核调试与系统取证工具集。

MatheuZSecurity / Dntry

Fileless ELF execution