{"id":13803131,"url":"https://github.com/QuokkaLight/rkduck","last_synced_at":"2025-05-13T15:32:15.904Z","repository":{"id":76017937,"uuid":"49976959","full_name":"QuokkaLight/rkduck","owner":"QuokkaLight","description":"Linux v4.x.x Rootkit","archived":false,"fork":false,"pushed_at":"2024-07-27T10:47:12.000Z","size":171,"stargazers_count":86,"open_issues_count":11,"forks_count":34,"subscribers_count":8,"default_branch":"master","last_synced_at":"2024-08-04T01:02:00.797Z","etag":null,"topics":["kernel","kernel-module","keylogger","linux","rootkit","stealth"],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/QuokkaLight.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2016-01-19T19:22:31.000Z","updated_at":"2024-05-23T07:34:20.000Z","dependencies_parsed_at":"2024-01-21T18:58:28.666Z","dependency_job_id":null,"html_url":"https://github.com/QuokkaLight/rkduck","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/QuokkaLight%2Frkduck","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/QuokkaLight%2Frkduck/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/QuokkaLight%2Frkduck/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/QuokkaLight%2Frkduck/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/QuokkaLight","download_url":"https://codeload.github.com/QuokkaLight/rkduck/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225239705,"owners_count":17442810,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["kernel","kernel-module","keylogger","linux","rootkit","stealth"],"created_at":"2024-08-04T01:00:23.197Z","updated_at":"2024-11-18T19:31:18.596Z","avatar_url":"https://github.com/QuokkaLight.png","language":"C","funding_links":[],"categories":["Kernel Module rootkit"],"sub_categories":[],"readme":"# rkduck - Rootkit for Linux v4 [![Build Status](https://travis-ci.org/QuokkaLight/rkduck.svg?branch=master)](https://travis-ci.org/QuokkaLight/rkduck)\n\n**rkduck** is a Loadable Kernel Module rootkit for the latest Linux Kernels v4. This is still a work in progress.\n\n## Features\n\n * **Stealth**\n\t * Hide files, directories, processes\n * **Communication**\n\t * SSH\n\t * Direct shell (unencrypted)\n\t * Reverse shell (unencrypted) \n * **Keylogger**\n\t * Recording of the keystrokes of every user.\n\t * Information sent periodically\n * **Crumbs**\n\t * A user space CLI program allowing the user to control the rootkit configuration during its execution\n\t * Requires an authentication to be used (hardcoded key stored in rduck, the configuration section has more information about it)\n\n## Tests\n\nAt the moment we didn't get the chance to test our rootkit on different versions of Linux to make sure everything is working as intended. If you want to report a bug feel free to create an issue or send us an email at \u003cquokkalight@gmail.com\u003e.\n\n## Contributors\n\n * **mpgn** - [Twitter](http://twitter.com/mpgn_x64)\n * **RainbowLyte** - [Twitter](http://twitter.com/Rainbowlyte)\n\n                      _.._\n                     /   a\\__,\n                     \\  -.___/\n                      \\  \\\n                 (\\____)  \\\n             |\\_(         ))\n        _____|   (_        /________\n             _\\____(______/__\n                  ______\n                 ","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FQuokkaLight%2Frkduck","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FQuokkaLight%2Frkduck","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FQuokkaLight%2Frkduck/lists"}