https://github.com/GuScarenci/LinuxKernelModuleBackdoor
https://github.com/heitortanoue/linux-backdoor
https://github.com/matheuspd/Linux-Kernel-Module-Backdoor-Demonstration
https://github.com/r-a303931/pcap-backdoor
https://github.com/FahdTolba/backdoor
https://github.com/AdamKostrzewa/qemux86CPUBackdoor
https://github.com/pench3r/icmp_shell
https://github.com/enzoconti/KernelBackdoor
https://github.com/threadexio/kernel-module-backdoor-poc
https://github.com/vandesdelca3/Subnet-Calc-Trojan
https://github.com/yikezh/Backdoor
https://github.com/Kracken256/dash-shell-rootkit
https://github.com/target111/linux-pam-backdoor
https://github.com/reveng007/reveng_rtkit
Linux Loadable Kernel Module (LKM) based rootkit (ring-0),hiding itself, processes/implants, rmmod proof, has ability to bypass infamous rkhunter antirootkit.
https://github.com/screetsec/TheFatRat
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc .
https://github.com/mav8557/Father
Network, File, Process hiding
Local privilege escalation
Remote accept() hook backdoor
Time/logic bomb component
GnuPG签名拦截
https://github.com/aesophor/satan
https://github.com/krisnova/boopkit
https://github.com/h3xduck/TripleCross