
siper
XDP Based Lightweight and Fast Firewall

XDP Based Lightweight and Fast Firewall

High fidelity defensive security lab simulating a DoD aligned enterprise network with Active Directory, VLAN segmentation, STIG based hardening,…

Lightweight Python-based IDS that monitors network traffic in real-time using Scapy, detecting DoS/DDoS attacks via per-IP request rate analysis with…

Educational Python simulator modeling a fictional security incident inspired by CVE-2024-36401 to demonstrate vulnerability management, segmentation,…

Lightweight, container-free sandbox for running commands with network and filesystem restrictions

eBPF-based Linux agent that enforces executable-level access policies in kernel space, sandboxing processes and restricting file, network, and GPU…

Whoami provides enhanced privacy, anonymity for Debian and Arch based linux distributions

Crescendo is a swift based, real time event viewer for macOS. It utilizes Apple's Endpoint Security Framework.

The Sigma command line interface based on pySigma

A Linux Host-based Intrusion Detection System based on eBPF.

A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.

PoC memory injection detection agent based on ETW, for offensive and defensive research purposes

eBPF LSM based Mandatory Access Control and jailer

ETW based POC to identify direct and indirect syscalls

eBPF Security Monitoring and Sandboxing Agent Based on Aya

First iteration of ML based Feedback WAF

A host based IDS written in C# Targetted at Metasploit