
libpcap
System-independent library for user-level packet capture and filtering. Provides a portable framework for low-level network monitoring, security…

System-independent library for user-level packet capture and filtering. Provides a portable framework for low-level network monitoring, security…

Primary data pipelines for intrusion detection, security analytics and threat hunting

Step-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…

Automated IP ban service that detects failed login attempts from event logs and files, blocking attackers on Windows and Linux via firewall…

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

A Linux Auditd rule set mapped to MITRE's Attack Framework

Host-local Linux security orchestrator enforcing nftables policy with HIDS/HIPS telemetry, bounded threat-intelligence feeds, out-of-band WAAP log…

This page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.

Linux kernel integrity monitor for detecting syscall hooking

Detection, mitigation, and IOC toolkit for Copy Fail CVE-2026-31431 Linux kernel page-cache privilege escalation

Detection script for CVE-2026-31431 (Copy Fail) that checks kernel version, patch presence, kernel configs, AF_ALG socket availability, setuid…

Wazuh 4.14.4 detection rules for CVE-2026-31431 (Copy Fail) - Linux Local Privilege Escalation via authencesn page cache write

Wazuh 4.14.4 detection rules for CVE-2026-43284 / CVE-2026-43500 (Dirty Frag) - Linux Local Privilege Escalation via page cache write

linux security checks

This is a bash script focus on hardening linux. This is a custom think of windows defender but unlike of their privacy issue. User can feel freedom…

Honeypot FTP server written in .NET Core (C#) for both Linux and Windows.

Real-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…

ZoneMinder is a free, open source Closed-circuit television software application developed for Linux which supports IP, USB and Analog cameras.