simple-rootkit. A simple attack against gcc and Python via kernel module, with highly detailed comments.