
NovaHypervisor
Windows hypervisor for Intel x64: defensive host hypervisor for Windows designed to mitigate kernel-level attacks including BYOVD, compatible with…

Windows hypervisor for Intel x64: defensive host hypervisor for Windows designed to mitigate kernel-level attacks including BYOVD, compatible with…

Sanitized offline fixture verifier for CVE-2026-81861 in SCADAPack Secure Lock

Kernel driver based disk size and sector query spoofing program, can evade Windows WMIC query.

:dart: Prevent RubberDucky (or other keystroke injection) attacks

dawg the hallway monitor - monitor operating system changes and analyze introduced attack surface when installing software

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of…

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build…

A secure low code deception runtime framework, leveraging AI for System Virtualization.

Manages the core lifecycle of Qubes OS domains via a Python admin API, handling secure compartmentalization with Xen and exposing an event system for…

Making containers more secure with eBPF and Linux Security Modules (LSM)

A lightweight, multi-layer Linux sandbox combining namespaces, pivot_root, seccomp-bpf, capability dropping, and an evidence-based verdict engine…

Lightweight, secure Linux sandboxes for untrusted processes. Runs in the browser and on the server.

Secure DOM trees isolation and encapsulation leveraging ShadowDOM

Python tool for safe archive handling, path traversal awareness, and secure extraction. Inspired by CVE-2025-8088.

secure vault for your files

Lightweight, secure control plane & real-time web dashboard in Crystal for Linux firewalld and NetworkManager host security.

Educational Flask lab simulating CVE-2026-76460 authentication bypass, with vulnerable, secure, and strict modes plus a PoC exploit script and…

Patch: RCE via authentication bypass (Ivanti Connect Secure)