A new bootable USB solution.
- bootable-usb
- multiboot
- uefi
- legacy
47,133 repositories indexed
1–17 of 17 · Most stars
A new bootable USB solution.
A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
eBPF-based Security Observability and Runtime Enforcement
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
ebpfkit is a rootkit powered by eBPF
LordOS — a free, fast and secure GNU/Linux distribution based on Debian, with its own desktop environment: display server and Wayland compositor in C, a React UI engine on QuickJS, and private native apps.
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
🔍 Function-level tracing tool for Seccomp profiling, with eBPF
bpflock - eBPF driven security for locking and auditing Linux machines
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.