
BerrySentinel
Berry Sentinel v5.0 — Advanced behavioral C2 and reverse shell detector for Linux/Windows/Unix systems. Features real-time connection analysis,…

Berry Sentinel v5.0 — Advanced behavioral C2 and reverse shell detector for Linux/Windows/Unix systems. Features real-time connection analysis,…

Kernel module using ftrace to block AF_ALG/AEAD requests, mitigating CVE-2026-31431 without requiring LSM BPF. Provides logging and easy compilation…

Single-host runtime-security dashboard on eBPF — Go agent + SvelteKit. Live process tree, network map, and rule-based alerts for plain Linux hosts.

Defensive detection package for CVE-2026-31431 (Linux kernel AF_ALG LPE). Sigma, Falco, auditd, KQL, and EQL rules mapped to MITRE ATT&CK…

CVE-2026-31431 "Copy Fail" - Analysis and defensive research for the Linux kernel AF_ALG privilege escalation vulnerability affecting all major…


Open-source blue team tool that protects Linux and Windows systems using multiple host and network defense and detection methods.

Tool for hiding Kali Linux on the network

Race reproducer and stress toolkit for CVE-2026-52910, a Linux kernel use-after-free in reuseport cBPF selector programs, with dmesg and leak checks.

Linux kernel integrity monitor for detecting syscall hooking

Detection rules and analysis for Dirty Frag (CVE-2026-43284/CVE-2026-43500) Linux kernel LPE vulnerability. Based on community research and health…

Host IDS for desktop users

Defensive security demo: seL4 microkernel gateway protecting vulnerable ICS from CVE-2019-14462

Whoami provides enhanced privacy, anonymity for Debian and Arch based linux distributions

Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

PowerShell-based backdoor detection tool for VMware Horizon connection servers, targeting CVE-2021-44228. Includes canary with optional submission…

Linux Automatic ARP (TCP / UDP / ICMP) Firewall

Ultimate Network Stealther that makes Linux a Ghost In The Net and protects from MITM/DOS/scan