Knark is a kernel based rootkit for Linux 2.2. Hides files in the filesystem, strings from /proc/net for netstat, processes, and program execution redirects for seamlessly bypassing tripwire / md5sum.
You can download it from the following link: https://packetstormsecurity.com/files/download/11410/knark-0.59.tar.gz
Source: https://packetstormsecurity.com/files/11410/knark-0.59.tar.gz.html

