Pinned Loading

1. Cronos-Rootkit Cronos-Rootkit Public

   Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.

   C++ 855 182

2. Black-Angel-Rootkit Black-Angel-Rootkit Public

   Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality.

   C++ 623 106

3. CaveCarver CaveCarver Public

   CaveCarver - PE backdooring tool which utilizes and automates code cave technique

   C++ 214 39

4. Kernel-Process-Hollowing Kernel-Process-Hollowing Public

   Windows x64 kernel mode rootkit process hollowing POC.

   C++ 182 25

5. Shellcodev Shellcodev Public

   Shellcodev is a tool designed to help and automate the process of shellcode creation.

   C++ 100 27

6. ZwProcessHollowing ZwProcessHollowing Public

   ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption

   C++ 77 20