mrexodia/TitanHide

Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThreadNotifyRoutine Callback、PsSetLoadImageNotifyRoutine Callback...

State-of-the-art native debugging tools

Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.

Stealthy Linux Kernel Rootkit

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

Vmware Hardened VM detection mitigation loader (anti anti-vm)

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

LKM Linux rootkit