h3xduck/TripleCross

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

9 best points · 2 comments · 4 Hacker News posts · 1,993 GitHub stars · View on GitHub

Hacker News discussions

• TripleCross: A Linux eBPF rootkit (9 points, 0 comments, by shaicoleman, 2022-07-05)
• TripleCross: A Linux eBPF rootkit framework (9 points, 0 comments, by caust1c, 2022-07-05)
• Show HN: TripleCross – A Linux eBPF rootkit with a C2 system and more (3 points, 2 comments, by h3xduck, 2022-07-06)
• TripleCross – Linux eBPF Rootkit (3 points, 0 comments, by _tk_, 2022-07-10)