Nidhogg is an all-in-one simple to use windows kernel rootkit.

Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.

Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.

NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg

Collection of windows rootkits

C# API for Nidhogg rootkit

Nidhogg is an all-in-one simple to use rootkit for red teams.