I found the suterusu rootkit to be feature-full and very well written. It covers all sorts of things a rootkit would do: https://github.com/mncoppola/suterusu h

I found the suterusu rootkit to be feature-full and very well written. It covers all sorts of things a rootkit would do: https://github.com/mncoppola/suterusu https://github.com/mncoppola/suterusu I never wrote kernel code before, but within 24 hours I was able to write a 'whitekit' that installs and hides as a rootkit and reports on sneaky behavior in dmesg: https://github.com/matthewaveryusa/whitekit/ https://github.com/matthewaveryusa/whitekit/ Fun stuff!