Linux Security and Monitoring Scripts
Repository Index
47,133 repositories indexed
73–96 of 105 · Most stars
HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
- ebpf
- security
- linux-kernel
- linux-security-module
A Simple Linux ELF Runtime Crypter
Script for automating Linux memory capture and analysis
The Multiplatform Linux Sandbox
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
- ai-agents
- autonomous-agents
- kali-linux
- llm-agents
Memory acquisition for Linux that makes sense.
Small set of tools for helping with reverse engineering Linux drivers
A Highly Accessible and Automated Virtualization Platform for Security Education
- cybersecurity
- virtualization
- docker
- virtualbox
Swift cross-platform crypto library using CommonCrypto/libcrypto
- swift
- cryptography
- commoncrypto
- openssl
simple YARA-based IOC scanner
- yara
- ioc
- security
- incident-response
The repository host gives no description.
Utility that exposes the expiry of TLS certificates as Prometheus metrics
Library to generate TOTP/HOTP codes
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
JWT auth for Laravel and Lumen
RSA public/private key encryption, private key signing and public key verification in Swift using the Swift Package Manager. Works on iOS, macOS, and Linux (work in progress).
- swift
- rsa-cryptography
- rsa-signature
- macos
An integrated security system for applications built on component
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Cryptographic Dataset Generation & Modelling Framework