Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
Repository Index
47,133 repositories indexed
1–18 of 18 · Most stars
Linux Runtime Security and Forensics using eBPF
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
Investigate malicious Windows logon by visualizing and analyzing Windows event log
- security
- dfir
- javascript
- visualization
Reverse engineering tool for Linux
- gdb
- cheat-engine
- reverse-engineering
- injection
Th3Inspector 🕵️ Best Tool For Information Gathering 🔎
- information-gathering
- reverse-phone-lookup
- mx-lookup
- whois-lookup
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀
- enterprise-software
- kubernetes
- audit-logs
- enterprise-ready
Share sensitive info without leaving a trace in your chat logs or email accounts.
Drltrace is a library calls tracer for Windows and Linux applications.
- dbi
- malware-analysis
- malware-detection
- api-trace
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
- http2
- race-condition
- race-conditions
- scapy
Merge multiple pcap files together, gracefully.
- pcap
- merge
- tcpdump-capture
- packet-processing
Delphi debug framework
- debug
- stacktrace
- disassembler
- portable-executable
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
:ghost: :flashlight: Invisible JS code execution & social engineering.
Traceroute improved wrapper for CSIRT and CERT operators
A layer of abstraction the around acme/autocert certificate manager (Golang)
- ssl
- ssl-certificates
- ssl-certificate
- x509
A modular Linux telemetry engine built with eBPF, libbpf CO-RE, and Modern C++ that captures kernel-level process, file, syscall, and network events through a portable event-processing pipeline for decoding, enrichment, filtering, and structured output—forming the foundation for higher-level runtime intelligence.
- cpp20
- ebpf
- event-logger
- filesystem