1. Immunity [CANVAS] http://www.immunitysec.com/products-canvas.shtml
2. Core [IMPACT] http://www.coresecurity.com/products/coreimpact/index.php
3. [Syscall Proxying] http://www.coresecurity.com/files/files/11/SyscallProxying.pdf
4. Metasploit’s [Meterpreter] http://www.metasploit.com/projects/Framework/docs/meterpreter.pdf
5. Ultimate way to hide [rootkit] https://www.rootkit.com/newsread.php?newsid=648