
fail2ban
Daemon to ban hosts that cause multiple authentication errors

Daemon to ban hosts that cause multiple authentication errors

ZoneMinder is a free, open source Closed-circuit television software application developed for Linux which supports IP, USB and Analog cameras.

Labtainers: A Docker-based cyber lab framework

Self-hosted multi-engine Sigma detection for event logs

Low-resource honeypot that emulates common network services to detect post-breach attacker activity, with extensible protocol modules and…

Hunt WiFi threats silently. Catch the hackers.

Real-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…

Docker configuration to quickly setup your own Canarytokens.

Self-contained SSH honeypot for capturing attacker interactions and turning them into structured security intelligence.

A repository of sysmon configuration modules

ML-Based behavioral endpoint detection system for Linux machines

This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources…

Linux kernel module using Kprobes to detect and neutralize CVE-2024-1086 heap double-free exploits via temporal gap tracking and active register…

A complete Blue Team Cybersecurity Lab featuring pfSense, Suricata, and ELK Stack for network monitoring and threat detection.

Detection rules and analysis for Dirty Frag (CVE-2026-43284/CVE-2026-43500) Linux kernel LPE vulnerability. Based on community research and health…

Defensive security demo: seL4 microkernel gateway protecting vulnerable ICS from CVE-2019-14462

Interactive GNU/Linux application firewall that filters outbound connections, blocks ads and malware domains, manages system firewall rules via GUI,…

Single-host runtime-security dashboard on eBPF — Go agent + SvelteKit. Live process tree, network map, and rule-based alerts for plain Linux hosts.