Repository Index

Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities

• ebpf
• security
• linux-kernel
• linux-security-module

Protect your SIP Servers from bad actors at https://sentrypeer.org

• sip
• voip
• security-tools
• honeypot

midgetpack is a multiplatform secure ELF packer

Minimal code to connect to a CEF debugger.

• security
• electron
• cef
• windows

🔍 Function-level tracing tool for Seccomp profiling, with eBPF

• ebpf
• ebpf-programs
• golang
• seccomp

Protects an unpatched PHP against php2shell (CVE-2026-109618 / CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.

• cve-2026-109618
• cve-2026-109619
• mitigation
• php

bpflock - eBPF driven security for locking and auditing Linux machines

• bpf
• ebpf
• security
• lsm

ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits

• linux
• security
• kernel
• rootkit

A collection of hash functions, ciphers, tools, libraries, and materials related to cryptography & security. :closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key: (project was renamed, libchaos is main)

eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness

• ebpf
• harness
• ifc
• policy-engine

🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit

• c
• forensics
• log-analysis
• security

Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.

• bpf
• ebpf
• kernel
• linux

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

End-to-end encryption for data at rest: a C library and CLI with recoverable keys, post-quantum (ML-KEM) key exchange, and user-to-user sharing

• encryption
• stream-encryption
• aes-256-gcm
• ecdh

The repository host gives no description.

Low interaction MySQL honeypot written in C

• honeypot
• mysql
• security

Meer is a "spooler" for Suricata / Sagan.

A strategy game based around the actions of RAF Bomber Command in the Second World War.

A fast AES-PRF based secure random-number generator

• drbg
• csprng
• aes
• aes-128

A low-interaction SSH honeypot written in C

• honeypot
• ssh
• security
• ssh-honeypotd

SmartView2 Handshake API implementation

GraphFuzz is an experimental framework for building structure-aware, library API fuzzers.

Code for ASE'21 Paper "CorbFuzz: Checking Browser Security Policies with Fuzzing"

• fuzzing
• concolic-execution
• browser-security