TripleCross

Integrates multiple advanced modules like library injection via GOT hijacking, execution hijacking, C2 backdoor with pattern-based and multi-packet triggers, stealth via sys_getdents tampering, and persistence, as outlined in the Features section.

Backed by a detailed bachelor's thesis and references to prior DEFCON talks, providing thorough documentation and insights into eBPF exploitation techniques for defensive awareness.

Implements sophisticated stealth methods, such as hiding files and directories by modifying sys_getdents results and using multiple trigger mechanisms inspired by real-world rootkits like Bvp47 and Hive.

Released under GPLv3 with clear licensing, allowing researchers to study, modify, and build upon the code for educational purposes, as emphasized in the Disclaimer and License sections.