Contains materials for my technical presentation exploring Linux malware tradecraft—from userland and fileless techniques to kernel rootkits, ftrace, eBPF, and defensive strategies.
Repository Index
47,133 repositories indexed
505–528 of 604 · Most stars
Killzone 3 // Unofficial PC Port (static recompilation). Work in progress, partly playable. Builds on your PC from your own game.
- ai-assisted
- direct3d12
- game-port
- killzone
Run basic functions from stripped binaries cross platform
UTF-8 Text Processing (R Package)
The Esoteric File Archive
- esolang
- esoteric-programming-language
Sample BPF offload apps.
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
- ebpf
- harness
- ifc
- policy-engine
A device for reading game ROMs, backing up & restoring saves and flashing re-writable flash carts for GB, GBC and GBA carts from your PC via USB. Jump on our Discord server (http://discord.gg/X2wS8eh). License CC-BY-NC-SA
Open source emulator for the Nintedo Switch 1 and 2. Highly work in progress
A library of cryptographic primitives (ciphers, hashes, etc) for OCaml
A honeypot for malware that propagates via USB storage devices
RLI Next Gen (Rling), a faster multi-threaded, feature rich alternative to rli found in hashcat utilities.
Blackstripes drawings
C++ implementation of the Local Binary Pattern texture descriptors. This class integrates with OpenCV and FFTW3 to bring a complete and fast implementation of the popular descriptors: LBP u2, ri, riu2 & hf. The routines for calculating these descriptors are inspired by the Matlab code of the original authors.
Sample ebpf programs to analyze
- ebpf
- ebpf-programs
- ebpf-opcode
UTFT with support for ESP8266 and ESP32
GBDK tutorials
Rawstudio is an open-source program to read and manipulate RAW images from digital cameras.
- raw
- digital-camera
- cr2
- nef
Powerful macro (cross) assembler package for several CPUs
🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit
Create packed ELF files to run on the PS2
A microservice (sidecar) that helps instantly determine the status of your PostgreSQL hosts including whether they are alive, which one is the master, which ones are replicas, and how far each replica is lagging behind the master.
- c
- master-replica
- pg
- postgresql
A highly customizable Lua 5.2 build system, allowing for common external modules to be linked in statically, and built-in modules to be excluded
Tamp is a low-memory, DEFLATE-inspired lossless compression library.
- compression
- deflate
- heatshrink
- lossless