A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
- mobile-security
- android
- malware-analyzer
- penetration-testing
47,133 repositories indexed
25–46 of 46 · Most stars
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
Run programs on linux with selectively restricted permissions.
ebpfkit is a rootkit powered by eBPF
A collection of Nix packages and NixOS modules for easily installing full-featured Bitcoin nodes with an emphasis on security.
Conveniently and reasonably harden NixOS.
Framework for running BPF programs with rules on Linux as a daemon. Container aware.
Quickly secure UNIX/Linux systems
LordOS — a free, fast and secure GNU/Linux distribution based on Debian, with its own desktop environment: display server and Wayland compositor in C, a React UI engine on QuickJS, and private native apps.
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
Android Mobile Device Hardening
A Highly Accessible and Automated Virtualization Platform for Security Education
🔍 Function-level tracing tool for Seccomp profiling, with eBPF
bpflock - eBPF driven security for locking and auditing Linux machines
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
WELA (Windows Event Log Analyzer, ゑ羅) is a tool for auditing and configuring Windows event log settings. Windows event logs are a vital source of information for Digital Forensics and Incident Response (DFIR), providing visibility into system activity and security events.
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
🐧 Security-focused Linux distribution with 140+ tools, custom kernel 6.17.13, AI assistant | 5 editions | Cloud, AI/ML, Automotive, Hardware hacking
Audit and fix your Mac's security in one command. No agent, no signup, open source.
eBPF Security Monitoring and Sandboxing Agent Based on Aya
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
An attempt at a minimalistic and secure operating system.
Advanced eBPF-driven Digital Forensics and Incident Response (DFIR) framework for live Golang malware analysis, threat hunting, and observability.