ebpfkit is a rootkit powered by eBPF
Repository Index
47,133 repositories indexed
49–72 of 91 · Most stars
Bluetooth experimentation framework for Broadcom and Cypress chips.
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
- application-security
- appsec
- bug-bounty
- burp-alternative
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
- malware-analysis
- dynamic-analysis
- security
- linux
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
Modular file scanning/analysis framework
- python
- analytic-machines
- analysis-framework
- python-script
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
- detect
- reverse-engineering
- signature
- malware-analysis
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
A secure password manager for macOS,Linux and Windows platforms
Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
Samsung Tizen root
- embedded-linux
- firmware-analysis
- hardware-hacking
- mali-gpu
A Linux packet crafting tool.
- packet-crafting
- networking
- hacking-tool
- intrusion-prevention
Drltrace is a library calls tracer for Windows and Linux applications.
- dbi
- malware-analysis
- malware-detection
- api-trace
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices
Linux Security and Monitoring Scripts
HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
- ebpf
- security
- linux-kernel
- linux-security-module
A Simple Linux ELF Runtime Crypter
Script for automating Linux memory capture and analysis
The Multiplatform Linux Sandbox
Memory acquisition for Linux that makes sense.
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
- ai-agents
- autonomous-agents
- kali-linux
- llm-agents
Small set of tools for helping with reverse engineering Linux drivers