1337kit

1337kit is a 64-bit Loadable Kernel Module (LKM) rootkit builder designed for educational use, allowing users to create custom rootkits based on YAML configurations. Its notable features include remote shell connectivity, the ability to hide files, process IDs, and network connections, as well as obfuscation and encryption options for enhanced stealth. This tool is tailored for malware analysts and cybersecurity practitioners involved in creating Capture The Flag (CTF) exercises.