Academic research rootkit using ftrace-hooking to hide files and processes via magic word or user/group. Tested until Linux 6.11.
-
Updated
Aug 21, 2026 - C
#
ftrace-hooking
Here are 3 public repositories matching this topic...
Author of Project Adrishya a rootkit which use ftrace mechanism to hook syscall; (write this because God commanded me); work for both x86_64 and arm; CREDIT-(Oleksii Lozovskyi{ilammy})FOUNDER OF FTRACE HOOKING
linux arm rootkit linux-kernel hacking cybersecurity device-driver arm64 linux-kernel-module malware-development low-level-programming kprobes linux-device-drivers linux-rootkit lkm-rootkit syscall-hooking rootkit-kernel ftrace-rootkit lkm-hacking ftrace-hooking
-
Updated
Sep 19, 2025 - C
Linux LKM rootkit implementing kernel-level stealth techniques including process hiding, file concealment, and network traffic control.
-
Updated
Jul 23, 2026 - C
Add this topic to your repo
To associate your repository with the ftrace-hooking topic, visit your repo's landing page and select "manage topics."