ISTAR is a set of python code that performs various functions including use of ptrace to simulate a userland rootkit.
You can download it from the following link: https://packetstormsecurity.com/files/download/81735/istari-public.tar.gz
Source: https://packetstormsecurity.com/files/81735/ISTAR-Proof-Of-Concept-Code.html