Nidhogg is an all-in-one simple to use windows kernel rootkit.
Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.
Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.
NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg
Collection of windows rootkits
C# API for Nidhogg rootkit