empty

revsh. A reverse shell with terminal support, data tunneling, and advanced pivoting capabilities.

mimic. Hide processes as a normal user in Linux.

shelljack. A keystroke / terminal logger for Linux.

ptrace_do. A ptrace library for easy syscall injection in Linux.

drinkme. A shellcode testing harness.

sigsleeper. Inject shellcode into running processes in Linux.

PELT. Post Exploitation Linux Toolkit

ctty. A library and tool for discovering and mapping Controlling TTYs in Linux.

xorscura. A tool / library for simplifying string obfuscation with xor.

sudo_mitm. A tool for harvesting sysadmin credentials in Linux

ghostshell. Simulates a logged in user.

dumb. A tool for stripping control characters and escape sequences from terminal output in Linux.

pretend. A tool for changing your identity in Linux. (uid/gid/sgids)

ew. Quick exec wrapper: geteuid(); setreuid(); setreguid(); execve()

macgen. A tool for generating valid random mac addresses for specific organizations.

Sheb-Teth. Devourer of Souls

TripleCross. A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

bpfhacks. eBPF hacks

dotfiles. dotfiles

osquery. SQL powered operating system instrumentation, monitoring, and analytics.

Phoenix. Phoenix