{"adoption": {"forks": 162, "observed_at": "2026-08-28T04:03:25.936368+00:00", "stars": 1061}, "canonical_url": "https://ross.abutalabs.com/products/chaos-rootkit", "card": {"archived": false, "artifact_type": "library", "description": "Now You See Me, Now You Don't ", "domain": ["security", "operating-systems", "developer-tools"], "enriched": true, "function": ["security", "reverse-engineering"], "health_score": 79, "homepage": "https://www.hackandhide.com/chaos-rootkit-internals-explained/", "language": "C++", "license": null, "license_family": "other", "maturity": "active", "member_repos": ["ZeroMemoryEx/Chaos-Rootkit"], "name": "ZeroMemoryEx/Chaos-Rootkit", "platform": ["windows", "cpp"], "pushed_at": "2026-05-22T00:18:47+00:00", "repo": "ZeroMemoryEx/Chaos-Rootkit", "stars": 1061, "tags": ["rootkit", "kernel-driver", "windows-kernel", "dkom", "malware-research", "ring-0", "privilege-escalation", "research"], "topics": ["driver", "kernel", "malware-development", "rootkit", "malware-research", "windows"], "urls": [], "use_cases": ["study Windows kernel rootkit techniques", "learn DKOM process hiding internals", "research driver signature and integrity bypass methods", "understand process protection levels in Windows", "malware analysis and defense training", "explore kernel driver swapping techniques"], "what_it_is": "Chaos-Rootkit is an x64 Ring 0 Windows kernel rootkit written in C++ as a research project to understand kernel internals and rootkit techniques. It demonstrates process hiding via DKOM, privilege elevation, driver swapping, file access restriction, and anti-malware bypass capabilities.", "when_to_avoid": ["you need production software or a supported tool", "you cannot legally or ethically use offensive kernel code", "you need a signed, stable driver for deployment", "you are not familiar with Windows kernel internals"], "when_to_choose": ["you are a security researcher studying rootkit internals", "you want to learn Windows kernel programming through real examples", "you are building defensive detections against rootkit techniques"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/chaos-rootkit", "repo": "ZeroMemoryEx/Chaos-Rootkit", "role": "main", "score": 58}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.936368+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.163334+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8c570d50fcc7012159a2b9b3cae5c12713aece499d007df14da51d9d1bfe2e99", "fetched_at": "2026-08-28T04:03:25.936368+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Chaos-Rootkit"}, {"content_hash": "a623f6a1de943e9eee53cad09abd465b7d00feed7d4eb5eecee50f8575cf5ef9", "fetched_at": "2026-08-29T12:58:32.936143+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/chaos-rootkit-internals-explained/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:32.940511+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:32.942182+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.936368+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.163334+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8c570d50fcc7012159a2b9b3cae5c12713aece499d007df14da51d9d1bfe2e99", "fetched_at": "2026-08-28T04:03:25.936368+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Chaos-Rootkit"}, {"content_hash": "a623f6a1de943e9eee53cad09abd465b7d00feed7d4eb5eecee50f8575cf5ef9", "fetched_at": "2026-08-29T12:58:32.936143+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/chaos-rootkit-internals-explained/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:32.940511+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:32.942182+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.163334+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8c570d50fcc7012159a2b9b3cae5c12713aece499d007df14da51d9d1bfe2e99", "fetched_at": "2026-08-28T04:03:25.936368+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Chaos-Rootkit"}, {"content_hash": "a623f6a1de943e9eee53cad09abd465b7d00feed7d4eb5eecee50f8575cf5ef9", "fetched_at": "2026-08-29T12:58:32.936143+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/chaos-rootkit-internals-explained/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:32.940511+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:32.942182+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.936368+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.936368+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.936368+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.163334+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8c570d50fcc7012159a2b9b3cae5c12713aece499d007df14da51d9d1bfe2e99", "fetched_at": "2026-08-28T04:03:25.936368+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Chaos-Rootkit"}, {"content_hash": "a623f6a1de943e9eee53cad09abd465b7d00feed7d4eb5eecee50f8575cf5ef9", "fetched_at": "2026-08-29T12:58:32.936143+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/chaos-rootkit-internals-explained/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:32.940511+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:32.942182+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.936368+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.936368+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.163334+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8c570d50fcc7012159a2b9b3cae5c12713aece499d007df14da51d9d1bfe2e99", "fetched_at": "2026-08-28T04:03:25.936368+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Chaos-Rootkit"}, {"content_hash": "a623f6a1de943e9eee53cad09abd465b7d00feed7d4eb5eecee50f8575cf5ef9", "fetched_at": "2026-08-29T12:58:32.936143+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/chaos-rootkit-internals-explained/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:32.940511+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:32.942182+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.936368+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.936368+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.936368+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.163334+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8c570d50fcc7012159a2b9b3cae5c12713aece499d007df14da51d9d1bfe2e99", "fetched_at": "2026-08-28T04:03:25.936368+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Chaos-Rootkit"}, {"content_hash": "a623f6a1de943e9eee53cad09abd465b7d00feed7d4eb5eecee50f8575cf5ef9", "fetched_at": "2026-08-29T12:58:32.936143+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/chaos-rootkit-internals-explained/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:32.940511+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:32.942182+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.936368+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.936368+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.163334+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8c570d50fcc7012159a2b9b3cae5c12713aece499d007df14da51d9d1bfe2e99", "fetched_at": "2026-08-28T04:03:25.936368+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Chaos-Rootkit"}, {"content_hash": "a623f6a1de943e9eee53cad09abd465b7d00feed7d4eb5eecee50f8575cf5ef9", "fetched_at": "2026-08-29T12:58:32.936143+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/chaos-rootkit-internals-explained/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:32.940511+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:32.942182+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.163334+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8c570d50fcc7012159a2b9b3cae5c12713aece499d007df14da51d9d1bfe2e99", "fetched_at": "2026-08-28T04:03:25.936368+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Chaos-Rootkit"}, {"content_hash": "a623f6a1de943e9eee53cad09abd465b7d00feed7d4eb5eecee50f8575cf5ef9", "fetched_at": "2026-08-29T12:58:32.936143+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/chaos-rootkit-internals-explained/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:32.940511+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:32.942182+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.163334+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8c570d50fcc7012159a2b9b3cae5c12713aece499d007df14da51d9d1bfe2e99", "fetched_at": "2026-08-28T04:03:25.936368+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Chaos-Rootkit"}, {"content_hash": "a623f6a1de943e9eee53cad09abd465b7d00feed7d4eb5eecee50f8575cf5ef9", "fetched_at": "2026-08-29T12:58:32.936143+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/chaos-rootkit-internals-explained/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:32.940511+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:32.942182+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.163334+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8c570d50fcc7012159a2b9b3cae5c12713aece499d007df14da51d9d1bfe2e99", "fetched_at": "2026-08-28T04:03:25.936368+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Chaos-Rootkit"}, {"content_hash": "a623f6a1de943e9eee53cad09abd465b7d00feed7d4eb5eecee50f8575cf5ef9", "fetched_at": "2026-08-29T12:58:32.936143+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/chaos-rootkit-internals-explained/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:32.940511+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:32.942182+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 83, "longevity": 89, "rhythm": 8}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 1258, "days_push": 104, "days_rel": 691, "gap_med": null, "n_releases_24m": 1}, "score": 58, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}