Hacker GitHub

← All repos

h3xduck/TripleCross

View on GitHub ↗ ★ 1,994 C

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

7 mentions on Hacker News by 5 people: 4 stories, 3 comments · first 2022-07-05 · latest 2022-11-06

Mentions per year 7 mentions · busiest year 2022 (7)
20082026
AllStoriesComments NewestTopOldest
  1. ….kernel.org/doc/html/latest/admin-guide/kernel-pa... [1] - https://github.com/citronneur/pamspy [2] - https://github.com/h3xduck/TripleCross [3] - https://github.com/krisnova/boopkit [4] - https://github.com/pathtofile/bad-bpf [5] -…
    comment by LinuxBender · 2022-11-06 · in eBPF – Adding functionality to OS at runtime
  2. …potential and future file-less/disk-less vulnerabilities from trusted actors. [1][2][3] [1] - https://github.com/h3xduck/TripleCross [2] - https://github.com/pathtofile/bad-bpf [3] - https://github.com/Gui774ume/ebpfkit
    comment by LinuxBender · 2022-09-08 · in What Is The eBPF Foundation?
  3. …with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities. https://github.com/h3xduck/TripleCross
    comment by shaicoleman · 2022-07-05 · in Show HN: Credentials dumper for Linux using eBPF