buter-chkalova/rvbbit-arsenal
GitHub: buter-chkalova/rvbbit-arsenal
该项目提供一套Linux内核攻防对偶的完整解决方案，通过攻击侧Rootkit与防御侧检测清除的对照，解决现代Linux环境下的高级威胁研究问题。
Stars: 2 | Forks: 1
# RVBBIT Arsenal: The Ultimate Offense & Defense Duality
## 概述
This repository houses two sides of the same coin:
- **`attack/`** – Project RVBBIT, a state-of-the-art Linux kernel rootkit with embedded miner and network worm.
- **`defense/`** – RvbbitSafe, the definitive countermeasure that detects, neutralizes, and removes every trace of RVBBIT.
Together, they form the most complete educational resource on modern Linux rootkit warfare.
## 快速开始
### 构建噩梦（攻击）
```
cd attack
First, embed the XMRig payload (see attack/README.md)
./build.sh
Deploy rvbbit_installer on isolated test VM
Note: Detailed instructions on embedding payloads are in attack/README.md.
Deploy the Cure (Defense)
bash
cd defense
chmod +x install.sh
sudo ./install.sh
Documentation
Full technical whitepaper available in docs/whitepaper.md.
Disclaimer
This software is provided for authorized educational and defensive research only. Misuse is strictly prohibited and may violate computer crime laws. The authors assume no liability for improper use.
```
标签：HTTP工具, IP 地址批量处理, Linux内核, x86_64平台, 云资产清单, 内核模块, 安全渗透, 安全资源, 客户端加密, 恶意软件, 挖矿程序, 攻击与防御, 教育研究, 根kit, 白皮书文档, 网络信息收集, 网络蠕虫, 自动回退, 逆向工程, 速率限制, 防护技术, 隔离测试