toorkit. A simple useless rootkit for the linux kernel. It is a kernel module which hooks up the open() syscall (or potentially any syscall) to replace it with a custom function.

github.com/deb0ch/toorkit

Vaya's read on this project

Problem, audience, market, and the verdict — sign in to see it.

Updates

No recent activity.