[Alex]

Here is a small list of most famous demo rootkits, if anyone of you have something else what should be listed here - please let us know.

- NT ROOTKIT 0.44 by Greg Hoglund - (rootkit.com)
- FU Rootkit by James Butler - (rootkit.com)
- FUTo by Peter Silberman - (rootkit.com)
- phide by 90210 - (rootkit.com)
- phide2 by 90210 - (rootkit.com)
- BadRKDemo by cardmagic - (rootkit.com)
- RKdemo1.1 by MP_ART & EP_X0FF - (rootkit.com)
- RKdemo1.2 by EP_X0FF & MP_ART - (mirror)
- phide_ex by PE386 - (mirror)
- Unreal.A by MP_ART & EP_X0FF - (mirror)

[a_d_13]

Hello,

Some of the rootkits are attached.

Thanks,
--AD

[cjbi]

Hello, this is my Rr1 test rootkit.
Have fun!

[Xylitol]

Rr1 Release x86 by Chae Jong Bin (@2gg on twitter)

[rkhunter]

Hi, here rootkits from my collection:

[rkhunter]

and

[rkhunter]

rootkits 3

[kareldjag/michk]

Simple demo tools already linked, plus Ghost rootkit demo
https://www.virustotal.com/file/0f4628d ... 340210169/

Archives password is kernelmode.info

rgds

[kareldjag/michk]

hi
Known hidden module but not posted yet CloakDLL
http://4coder.org/c-c-source-code/2/CloakDll.cpp.html
https://www.virustotal.com/file/a31e306 ... /analysis/

Rgds

[kareldjag/michk]

hi
A demo rootkit from France, Ring of Fire http://fluxius.handgrep.se/2011/01/02/r ... -and-dkom/

SHA512 0ab2646af534cf12f731846d8a501880e02b77f6feea068ee7d59a1669b6404ab990a91ef85e3e9a7c5b6eb7ccd962ef590204088cc07333edfa81b6732710c5