
KOOBE-Guard
Linux kernel module using Kprobes to detect and neutralize CVE-2024-1086 heap double-free exploits via temporal gap tracking and active register…

Linux kernel module using Kprobes to detect and neutralize CVE-2024-1086 heap double-free exploits via temporal gap tracking and active register…

Docker configuration to quickly setup your own Canarytokens.

Multi-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring,…

Purpleteam scripts simulation & Detection - trigger events for SOC detections

Python alternative to Mimikatz lsadump::dcshadow

Single-host runtime-security dashboard on eBPF — Go agent + SvelteKit. Live process tree, network map, and rule-based alerts for plain Linux hosts.

Detection rules and analysis for Dirty Frag (CVE-2026-43284/CVE-2026-43500) Linux kernel LPE vulnerability. Based on community research and health…

DECeption with Evaluative Integrated Validation Engine (DECEIVE): Let an LLM do all the hard honeypot work!

GitHub mirror of the Linux Kernel's audit repository

Automated Network Security with Rust: Detecting and Blocking Port Scanners

iptables-based stateful firewall with human-friendly configuration and optional QoS (FireQOS) for bandwidth management.

ZoneMinder is a free, open source Closed-circuit television software application developed for Linux which supports IP, USB and Analog cameras.


A Rust-based transparent Tor proxy that routes all system traffic through the Tor network enhanced security, proper DNS isolation, and modern Linux…

DeadManSwitch in rust with several triggers (remote local and network)

Defensive security demo: seL4 microkernel gateway protecting vulnerable ICS from CVE-2019-14462

An easy to use, light-weight, on-demand virus scanner for Linux systems. For additional help, see the <a…

Fun things against the abuse of the recent CVE-2021-44228 (Log4Shell) vulnerability using common web servers.