
CPLHF
Modular Bash toolkit that hardens Debian/Ubuntu systems for CyberPatriot competitions, automating account, firewall, SSH, PAM, and service hardening…

Modular Bash toolkit that hardens Debian/Ubuntu systems for CyberPatriot competitions, automating account, firewall, SSH, PAM, and service hardening…

eBPF-based Linux agent that enforces executable-level access policies in kernel space, sandboxing processes and restricting file, network, and GPU…

A high-fidelity, read-only internal network security assessment toolkit for Linux and Windows infrastructure. Employs a zero-mutation, default-deny…

Defensive Linux firewall toolkit combining IPTables rules and kernel configuration to protect hosts and servers against DoS, DDoS, and network…

A Linux Auditd rule set mapped to MITRE's Attack Framework

linux security checks

Passive Linux host scanner that classifies exposure to CVE-2026-31431 via kernel version, distro changelog, module status, and AF_ALG reachability,…

Best-practice Linux Auditd rule set with 14,956 MITRE ATT&CK-mapped rules, Ansible deployment role, and lint/test tooling for security monitoring and…

Automated Linux security auditing tool that checks 130+ CIS benchmark items for RHEL-based systems, generating detailed XML reports on system…

One-tap Linux OPSEC hardening & anonymity toolkit

A safe Linux checker for CopyFail/CVE-2026-31431 that reviews kernel version, update status, reboot status, and algif_aead exposure indicators.

Detect and mitigate CVE-2026-31431 (Copy Fail) on Linux systems.

Detection script for CIFSwitch - CVE-2026-46243

Express security essentials deployment for Linux Servers

InSpec-based compliance profile for auditing Linux system hardening against security baselines, ensuring consistent configuration across…

Script to check if system are vulnable to cve-2026-23111

Per-distro mitigation scripts for CVE-2026-31431 ("Copy Fail") Linux kernel LPE.

Ansible playbook that automates remediation of CVE-2026-31431 (Copy Fail) on OCI Linux instances by installing updated kernel packages, rebooting,…