Benthic

Benthic is a comprehensive Windows kernel rootkit designed for educational exploration and practical insights into rootkit development. It features advanced capabilities including process and network stealth, keylogging, and file hiding, all integrated into a modular framework for demonstrating real-world stealth and persistence from kernel mode. While leveraging techniques such as DKOM for process hiding and using the Windows Filtering Platform for network obfuscation, Benthic serves as a foundational resource for those venturing into the complexities of rootkit creation.