h3xduck/TripleCross

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

↗ Open on GitHub

Stars

1,978

Forks

244

Language

C

License

GPL-3.0

Last push

2 years ago

C security ebpf kernel backdoor rootkit libbpf

No related intel yet

This repo has not appeared in any of the sources the radar tracks. The collector runs on a schedule — check back once it covers this repo.