The Linux Kernel Module Programming Guide (updated for 5.0+ kernels)
翻译 - Linux 内核模块编程指南（针对 5.x 内核更新）
Utility to find hidden Linux kernel modules
An example rootkit that gives a userland process root permissions
Tools to bypass flawed SELinux policies using the init_module system call
Virtual Linux block device driver for simulating and performing I/O.
A quick LKM rootkit that executes a reverse TCP netcat shell with root privileges.
Rust out-of-tree Linux Kernel Modules (LKMs) experimentation framework
64-bit LKM Rootkit builder based on yaml prescription. Working on 5.15.5 kernel
kfile-over-icmp is an LKM for stealth sending of files over ICMP communication.
Ftrace Based Linux Loadable Kernel Module Rootkit for Linux Kernel 5.x and 6.x on x86_64, hides files, hides process, hides bind shell & reverse shell port, privilege escalation, cleans up logs and ba...
A LKM (Loadable Kernel Module) to execute a command as root; I include a example of using netcat and a compiled(with source and steps on how to compile) reverse shell provided in C.
kunkillable is an LKM that makes userland processes unkillable.
Linux kernel programming using loadable kernel modules (LKMs)