Repository Index

Roaring bitmaps in C (and C++), with SIMD (AVX2, AVX-512 and NEON) optimizations: used by Apache Doris, ClickHouse, Alibaba Tair, Redpanda, YDB and StarRocks

• roaring-bitmaps
• visual-studio
• c
• clang

A C library for reading and writing sound files containing sampled audio data.

• libsndfile
• audio-library
• c
• cmake

A free and open-source Touhou Project fangame

• sdl
• c
• game
• opengl

Process-aware, eBPF-based tcpdump

• ebpf
• ebpf-tc
• tcpdump
• tcpdump-like

DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.

• binary-analysis
• taint-analysis

PC, Android, iOS and macOS port of the ICO (PS2) decompilation (nathanialf/ico): Windows, Linux, Steam Deck, Android, iPhone via LiveContainer and Apple-silicon Mac (contributed). Contains no game data.

• android
• decompilation
• linux
• port

TranslatedContainer for Mikrotik that allows connecting to AmneziaWG servers from Mikrotik. Fully supports the AWG 3.1 protocol. Configurator: https://timbrs.github.io/amneziawg-mikrotik-c/conf3.0.html

Static recompilation of Astral Chain to native Windows, with a Vulkan renderer. Game files not included.

A self contained Lua MessagePack C implementation.

Play solitaire in your terminal!

• tty-game
• solitaire-game
• c
• ncurses

piVCCU is a project to install the original Homematic CCU3 firmware inside a virtualized container (lxc) on ARM based single board computers.

• homematic
• raspberrypi
• raspbian
• hm-mod-rpi-pcb

Elementary icons forked from upstream, extended and maintained for Xfce

A small, self-contained, zero-config, MIT licensed, cross-platform, readline and libedit replacement.

• readline
• libedit
• linenoise
• line-editor

bpflock - eBPF driven security for locking and auditing Linux machines

• bpf
• ebpf
• security
• lsm

🧪 Lightweight health check utilities for Docker containers

• checkhttp
• checkport
• docker
• docker-image

ruby bindings for liblxc

• lxc
• ruby
• containers

Contains materials for my technical presentation exploring Linux malware tradecraft—from userland and fileless techniques to kernel rootkits, ftrace, eBPF, and defensive strategies.

Linux containers control plane

The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.

• macos

Unicode normalization library. (Mirror of Yoshida-san's code base to maintain the RubyGem.)

• unicode
• ruby
• rubynlp

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

Self-contained OCaml bindings to linenoise, easy high level readline functionality in OCaml

• ocaml
• linenoise
• readline
• standalone

audio file [silence] analyzer

• unmaintained

Docker DNS Forwarder is a lightweight tool that enables the host machine to resolve Docker container names to their IPs via domains in the format "container-name.custom-suffix" (e.g., ".docker")

• c
• container-networking
• dns
• dns-forwarder