project-rvbbit

RVBBIT is an educational proof-of-concept tool for researching Linux kernel rootkits, focusing on how they obscure the actual kernel state from userspace observations. It implements various rootkit techniques, including process and module hiding, syscall interception, and manipulation of filesystem and network visibility, all aimed at understanding these evasion methods in a controlled environment. Notably, the tool is designed strictly for research and education, lacking functional capabilities for exploitation or propagation.