PinnedLoading

1. Cronos-RootkitCronos-RootkitPublic

   Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.

   C++ 884 184

2. Black-Angel-RootkitBlack-Angel-RootkitPublic

   Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality.

   C++ 637 112

3. CaveCarverCaveCarverPublic

   CaveCarver - PE backdooring tool which utilizes and automates code cave technique

   C++ 222 40

4. Kernel-Process-HollowingKernel-Process-HollowingPublic

   Windows x64 kernel mode rootkit process hollowing POC.

   C++ 186 27

5. ShellcodevShellcodevPublic

   Shellcodev is a tool designed to help and automate the process of shellcode creation.

   C++ 106 30

6. ZwProcessHollowingZwProcessHollowingPublic

   ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption

   C++ 83 20