krisnova/boopkit

Health v2 · maintenance only

Adoption not part of the score

1677 stars · 183 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

boopkit is a Linux rootkit and backdoor written in C that uses eBPF to enable remote command execution over raw TCP. It requires prior privileged access on the target server and includes a client tool (boopkit-boop) for triggering reverse shells and RCE.

Use cases

• demonstrate eBPF-based backdoor techniques in security research
• test detection capabilities against eBPF rootkits
• spawn a reverse shell over TCP on a server you already control
• study Linux kernel eBPF process hiding and obfuscation
• red team lab exercises for privileged post-exploitation

When to choose

• you are a security researcher studying eBPF-based rootkits on Linux
• you need a lab tool to test endpoint detection of eBPF backdoors
• you want to demonstrate risks of eBPF abuse in privileged environments

When to avoid

• you need a legitimate remote access tool like SSH for operations
• you lack prior privileged access on the target system
• you cannot accept the legal and operational risks of running rootkit software
• your environment is production and not an authorized testing lab

Facets

cli-tool · maturity maintenance

security networking security penetration-testing operating-systems cli ebpf rootkit backdoor reverse-shell tcp red-team security-research linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="krisnova/boopkit")