
LogsTotal
Self-hosted multi-engine Sigma detection for event logs

Self-hosted multi-engine Sigma detection for event logs

Hunt WiFi threats silently. Catch the hackers.

Real-time system monitoring tool for detecting process activity and network exposure!

High-performance Certificate Transparency (CT) monitoring tool written in Rust. Real-time stream of newly issued SSL/TLS certificates from CT logs.…

Open-source blue team tool that protects Linux and Windows systems using multiple host and network defense and detection methods.

An open-source TPM device-attest-01 CA server

Scripts to triage compromised systems (Linux, ESXi, FreeBSD/NetScaler)

shell script protector (obfuscation, embedded interpreter, DRM) - invisible to kernel tracing

Tool for hiding Kali Linux on the network

Race reproducer and stress toolkit for CVE-2026-52910, a Linux kernel use-after-free in reuseport cBPF selector programs, with dmesg and leak checks.

Linux kernel security driver using LSM to harden the system, monitor and restore syscall table integrity, and protect CPU control registers against…

Low-resource honeypot that emulates common network services to detect post-breach attacker activity, with extensible protocol modules and…

Rust exploit PoC for Linux kernel LPE CVE-2026-31431 (AF_ALG page-cache write) plus eBPF runtime defense blocking AF_ALG socket creation via LSM or…

Detects exposure to CVE-2026-31431 (Copy Fail) and optionally mitigates by disabling the vulnerable algif_aead kernel module, providing verdicts and…

Audits and hardens Linux systems against AF_ALG local privilege escalation (CVE-2026-31431) by checking kernel crypto API exposure, restricting…

Detect and mitigate CVE-2026-31431 (Copy Fail) on Linux systems.

CVE-2026-31431 "Copy Fail" - Analysis and defensive research for the Linux kernel AF_ALG privilege escalation vulnerability affecting all major…

eBPF-based workaround for CVE-2026-31431 (Copy.Fail) that filters or kills AF_ALG socket creation to prevent local privilege escalation and container…