From 5ba51d9653a04434ef074a3c9d43a8d0344f6d9e Mon Sep 17 00:00:00 2001
From: pe3zx <pe3zx@users.noreply.github.com>
Date: Tue, 5 Jul 2022 10:30:00 +0700
Subject: [PATCH] Add: h3xduck/TripleCross to Execution section

---
 Offensive.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Offensive.md b/Offensive.md
index f94b5d0..36eb5cf 100644
--- a/Offensive.md
+++ b/Offensive.md
@@ -486,6 +486,10 @@ Some tools can be categorized in more than one category. But because the current
         <td><a href="https://github.com/gloxec/CrossC2">gloxec/CrossC2</a></td>
         <td>Generate CobaltStrike's cross-platform payload</td>
     </tr>
+    <tr>
+        <td><a href="https://github.com/h3xduck/TripleCross">h3xduck/TripleCross</a></td>
+        <td>A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.</td>
+    </tr>
     <tr>
         <td><a href="https://github.com/hausec/MaliciousClickOnceMSBuild">hausec/MaliciousClickOnceMSBuild</a></td>
         <td>Basic C# Project that will take an MSBuild payload and run it with MSBuild via ClickOnce.</td>