OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
- hids
- security
- pci-dss
- nist800-53
Repository Index
70,234 visible repositories in the index
1–21 of 21 · Most stars
SIMD, SWAR & GPU kernels for strings: search, hashing, sorting, edit distances, UTF-8 segmentation & ciphers for C, C++, CUDA, Python, Rust, Go, Swift, JS, C# & Java 🦖
Hiding kernel-driver for x86/x64.
A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' CherryTree. Reconscan Py2 and Py3. Custom ISO building.
- oscp
- reconscan
- pentest
- penetration-testing
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
- pe-sieve
- anti-malware
- malware-analysis
- malware-detection
Xiaomi Smart Home Device Reverse Engineering and Hacking
- iot
- xiaomi
- xiaomi-smart
- root
The repository host gives no description.
A framework for layer 2 attacks
The PE file analysis toolkit
- binary-analysis
- reverse-engineering
- pe-file
- portable-executable
A Linux packet crafting tool.
- packet-crafting
- networking
- hacking-tool
- intrusion-prevention
ARMv7 payload that provides arbitrary code execution on MediaTek bootloaders
Protects an unpatched PHP against php2shell (CVE-2026-109618 / CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.
- cve-2026-109618
- cve-2026-109619
- mitigation
- php
A mysqldump anonymizer
- mysqldump
- anonymizer
- database-anonymizer
- rgpd
A collection of hash functions, ciphers, tools, libraries, and materials related to cryptography & security. :closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key: (project was renamed, libchaos is main)
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
- ebpf
- harness
- ifc
- policy-engine
Beacon Object File (BOF) to coerce machine account auth via IPP.
A honeypot for malware that propagates via USB storage devices
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Reducing Bias in Modeling Real-world Password Strength via Deep Learning and Dynamic Dictionaries