https://github.com/MatheuZSecurity/Singularity

Stealthy Linux Kernel Rootkit for modern kernels (6x)

ftrace hidden hooking kernel linux lkm poc rootkit syscall

Last synced: 01 May 2026

https://github.com/matheuzsecurity/d3m0n1z3dshell

Demonized Shell is an Advanced Tool for persistence in linux.

advanced-persistence automated-persistence backdoor bash linux linux-persistence persistence red-team

Last synced: 16 May 2025

https://github.com/matheuzsecurity/singularity

LKM rootkit for modern kernels (6x)

ftrace hooking kernel linux lkm poc rootkit syscall

Last synced: 08 Oct 2025

https://github.com/matheuzsecurity/koth-tryhackme-tricks

Koth - TryHackMe Tricks

Last synced: 16 Jul 2025

https://github.com/matheuzsecurity/rootkit

Collection of codes focused on Linux rootkits

collection ebpf ftrace hooking kernel ldpreload linux malware persistence rootkit

Last synced: 22 Jun 2025

https://github.com/matheuzsecurity/modtracer

ModTracer Finds Hidden Linux Kernel Rootkits and then make visible again.

forensics kernel linux lkm modtracer rootkit

Last synced: 09 Apr 2025

https://github.com/matheuzsecurity/nullsection

NullSection is an Anti-Reversing tool that applies a technique that overwrites the section header with nullbytes.

Last synced: 27 Sep 2025

https://github.com/matheuzsecurity/imperius

Make an Linux Kernel rootkit visible again.

kernel linux lkm reveal rootkit

Last synced: 22 Aug 2025

https://github.com/matheuzsecurity/detect-lkm-rootkit-cheatsheet

Cheat sheet to detect and remove linux kernel rootkit

cheat detect forensics ftrace hook kernel linux lkm procfs remove rootkit sheet syscall sysfs tracefs

Last synced: 02 Mar 2026

https://github.com/matheuzsecurity/unhookinglinuxedr

Attacking the cleanup_module function of a kernel module

cortex edr hook kernel linux lkm malware module research rootkit trendmicro trick

Last synced: 03 Jul 2025

https://github.com/matheuzsecurity/exploit-cve-2025-24799

CVE-2025-24799 Exploit: GLPI - Unauthenticated SQL Injection

cve cve-2025-24799 exploit glpi

Last synced: 03 Mar 2026

https://github.com/matheuzsecurity/systemd-backdoor

A simple script to automate systemd backdoor

Last synced: 23 Apr 2025

https://github.com/matheuzsecurity/koth-protect-king

A script to protect your king in KoTH

Last synced: 23 Apr 2025

https://github.com/matheuzsecurity/simple-bufferoverflow

A simple C program to demonstrate a Buffer Overflow.

Last synced: 23 Apr 2025

https://github.com/matheuzsecurity/ringreaper

Simple Linux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls.

c2 evasion iouring malware poc rootkit

Last synced: 11 Jul 2025

https://github.com/matheuzsecurity/matheuzsecurity.github.io

My blog

Last synced: 06 Feb 2026

https://github.com/matheuzsecurity/simple-portscanner

A simple port scanner made in python 3.

Last synced: 23 Apr 2025

https://github.com/matheuzsecurity/writeup-ctf-meninadecybersec

Last synced: 14 Mar 2026

https://github.com/matheuzsecurity/killhook

A simple LKM that uses ftrace to hook sys_kill

Last synced: 27 Sep 2025