Adversary Emulation Framework
- security-tools
- implant
- golang
- dns-server
Repository Index
47,133 repositories indexed
1–24 of 34 · Most stars
A rewrite of the old legacy software "depends.exe" in C# for Windows devs to troubleshoot dll load dependencies issues.
Cloud Native Runtime Security
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
- reverse-engineering
- disassembler
- security
- framework
Open Source Cloud Native Application Protection Platform (CNAPP)
- cloud-native
- vulnerability-management
- threat-analysis
- devsecops
eBPF-based Security Observability and Runtime Enforcement
Linux Runtime Security and Forensics using eBPF
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
ebpfkit is a rootkit powered by eBPF
Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
Web Application Honeypot
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API
- reverse-engineering
- disassembler
- ida-plugin
- ida
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
- ebpf
- security
- linux-kernel
- linux-security-module
Encrypted pastebin using IPFS
'Packet Capture Forensic Evidence eXtractor' is a tool that finds and extracts files from packet capture files
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Scans SPF and DMARC records for issues that could allow email spoofing.
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
- ebpf
- harness
- ifc
- policy-engine
OPNSense's Suricata IDS/IPS Detection Rules Against NMAP Scans
- crowdsec
- intrusion-detection
- intrusion-detection-system
- intrusion-prevention
eBPF Security Monitoring and Sandboxing Agent Based on Aya