GhostRoot phntmzn · COMPLETED
GhostRoot is a modular macOS rootkit framework for pre-SIP systems (≤10.14), featuring DKOM-based process hiding, kernel memory access, launchd job unlinking, and privilege escalation for stealth and persistence research.
github.com/phntmzn/GhostRoot · ★ 4 · Forks 0 · Size 13 KB
SUMMARY
Technologies 5
Scored 5
Observed 5
Practices 6
Evidence 5
Skips 0
COVERAGE
Analyzed 21 files · 3 commits · 0 API calls
TECHNOLOGIES & DEPTH
C++ LANGUAGE Depth 70
3 files · PRODUCTION
Shell LANGUAGE Depth 70
1 files · PRODUCTION
C LANGUAGE Depth 70
7 files · PRODUCTION
Markdown LANGUAGE Depth 70
3 files · PRODUCTION
Python LANGUAGE Depth 70
2 files · PRODUCTION
PRACTICES
documentation · observedautomated_tests · absentcontinuous_integration · absentcontainerization · absentlinting · absentformatting · absent
ACTIVITY & OWNERSHIP
First commit 2025-08-19
Last commit 2025-08-19
Active months 1
Commits 3