From abdfb4ccf8dbfe1686dabe556436cf9de81908c7 Mon Sep 17 00:00:00 2001
From: pe3zx <pe3zx@users.noreply.github.com>
Date: Fri, 3 Jan 2025 12:52:03 +0700
Subject: [PATCH] Add: DualHorizon/blackpill to Execution

---
 Offensive.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Offensive.md b/Offensive.md
index f859b83..940e2e5 100644
--- a/Offensive.md
+++ b/Offensive.md
@@ -410,6 +410,10 @@ Some tools can be categorized in more than one category. But because the current
         <td><a href="https://github.com/dtrizna/easy-hollow">dtrizna/easy-hollow</a></td>
         <td>Automated build for process hollowing shellcode loader. Build on top of TikiTorch and donut projects.</td>
     </tr>
+    <tr>
+        <td><a href="https://github.com/DualHorizon/blackpill">DualHorizon/blackpill</a></td>
+        <td>A Linux kernel rootkit in Rust using a custom made type-2 hypervisor, eBPF XDP and TC programs</td>
+    </tr>
     <tr>
         <td><a href="https://github.com/EddieIvan01/memexec">EddieIvan01/memexec</a></td>
         <td>A library for loading and executing PE (Portable Executable) from memory without ever touching the disk</td>