A forum for reverse engineering, OS internals and malware analysis 

Forum for announcements and questions about tools and software.
 #4354  by Alex
 Sat Jan 08, 2011 12:57 pm
Here is a small list of most famous demo rootkits, if anyone of you have something else what should be listed here - please let us know.

- NT ROOTKIT 0.44 by Greg Hoglund - (rootkit.com)
- FU Rootkit by James Butler - (rootkit.com)
- FUTo by Peter Silberman - (rootkit.com)
- phide by 90210 - (rootkit.com)
- phide2 by 90210 - (rootkit.com)
- BadRKDemo by cardmagic - (rootkit.com)
- RKdemo1.1 by MP_ART & EP_X0FF - (rootkit.com)
- RKdemo1.2 by EP_X0FF & MP_ART - (mirror)
- phide_ex by PE386 - (mirror)
- Unreal.A by MP_ART & EP_X0FF - (mirror)
Attachments
(9.73 KiB) Downloaded 372 times
(5.34 KiB) Downloaded 378 times
 #5846  by a_d_13
 Thu Apr 07, 2011 7:27 am
Hello,

Some of the rootkits are attached.

Thanks,
--AD
Attachments
Shadow Walker
(97.96 KiB) Downloaded 238 times
NTRootkit
(252.44 KiB) Downloaded 265 times
FUTo
(472.42 KiB) Downloaded 250 times
FU
(2.54 MiB) Downloaded 230 times
BadRKDemo
(18.94 KiB) Downloaded 212 times
AK922
(3.85 KiB) Downloaded 205 times
 #6723  by cjbi
 Wed Jun 08, 2011 9:11 am
Hello, this is my Rr1 test rootkit.
Have fun!
Attachments
pw: thisisnotmalware
(6.75 KiB) Downloaded 185 times
 #14465  by kareldjag/michk
 Fri Jul 06, 2012 8:38 am
hi
A demo rootkit from France, Ring of Fire http://fluxius.handgrep.se/2011/01/02/r ... -and-dkom/

SHA512 0ab2646af534cf12f731846d8a501880e02b77f6feea068ee7d59a1669b6404ab990a91ef85e3e9a7c5b6eb7ccd962ef590204088cc07333edfa81b6732710c5
Attachments
source file with no password
(4.94 KiB) Downloaded 127 times