Tools

zoneminder/zoneminder

ZoneMinder is a free, open source Closed-circuit television software application developed for Linux which supports IP, USB and Analog cameras.

antisurveillanceagency/shadownet

ShadowNet is an anonymous routing protocol that forces all connections (system-wide) to go through Tor while implementing Mixnet-like…

at0m-b0mb/specter-flipperzero

👻 Specter — passive 13.56 MHz NFC reader/skimmer bug-sweep for Flipper Zero. Counter-surveillance EMF meter using the onboard NFC chip. No extra…

cea-sec/usbsas

Tool and framework for securely reading untrusted USB mass storage devices.

owasp/quantum-security-project

Vendor-neutral OWASP project mapping quantum-era security risks with a Top 10 risk list, mitigation guidance, and threat models for post-quantum…

intel/intel-linux-processor-microcode-data-files

Official Intel microcode data files for updating processor firmware to mitigate security vulnerabilities and address functional issues on Linux…

plunder707/attestos

Bazzite plus a TPM boot attestation layer. Work in progress: builds unverified, UKI mechanism unresolved. Spec: github.com/plunder707/attested-gaming

speed47/spectre-meltdown-checker

Reptar, Downfall, Zenbleed, ZombieLoad, RIDL, Fallout, Foreshadow, Spectre, Meltdown vulnerability/mitigation checker for Linux & BSD

rhboot/shim

UEFI shim loader

fusion1110/ebpf-hid_guard

Linux kernel-space HID injection attack detector using eBPF. Monitors USB and Bluetooth HID devices for anomalous keystroke timing and automatically…

nadafarafat/bd-alaris-firmware-analysis

Firmware security analysis of BD Alaris 8015 infusion pump (CVE-2016-9355). Identified 6 compound vulnerabilities including plaintext Wi-Fi…

objective-see/donotdisturb

Detect Evil Maid Attacks

ahmaaaaadbntaaaaa-byte/tid-the-instant-destroyer

Hardware-level security protocol for mitigating cache-based side-channel attacks.

badrrx/wifi-spiderweb

An active cyber defense & honeypot system for OpenWrt routers running from a USB drive.

idov31/novahypervisor

Windows hypervisor for Intel x64: defensive host hypervisor for Windows designed to mitigate kernel-level attacks including BYOVD, compatible with…

engrbilal992/deaddialect

A session-unique RISC-V ISA — every boot speaks a different dialect. Old binaries become invalid. Malware cannot persist.

leochen-coremind/vmpacker

ARM64 ELF Virtual Machine Protection System

jason996/maritime-security-paper

Comprehensive research on security vulnerabilities in autonomous maritime vessels and defense recommendations