Research PoC demonstrating Linux Kernel hooking plus defences.
☆35Apr 13, 2026Updated 6 months ago
Alternatives and similar repositories for FlipSwitch-dev
Users that are interested in FlipSwitch-dev are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- domain name/brand infringement detector. pulls newly registered domains daily, searches variations of your company domain names and alert…☆24Feb 22, 2022Updated 4 years ago
- Supporting material for the "Hunting Bugs In The Tropics" DEFCON 30 talk☆12Aug 18, 2022Updated 4 years ago
- A C and Go /proc/pid/maps cloak of invisibilty for shared object files☆23Nov 19, 2025Updated 11 months ago
- No one writes dumb malware anymore. This is a repo for dumb malware.☆10Apr 18, 2017Updated 9 years ago
- Provides an easy way to collect and send Slack access & integration logs.☆13Oct 19, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Rootkit spotter - experimental Linux rootkit finder LKM☆31Oct 11, 2020Updated 6 years ago
- Governance-grade, OKF-compatible knowledge-base format with a single-writer MCP server and CLI. Pre-release.☆30Updated this week
- ☆28Oct 22, 2026Updated last week
- A kernel driver to get a Handle to virtually *every* process☆15Jan 16, 2024Updated 2 years ago
- Throwaway root shells in AWS Lambda Firecracker microVMs. Launch a fresh VM in ~2s, run a command or attach an interactive shell, then le…☆34Aug 25, 2026Updated 2 months ago
- Nice (ish) bindings for the EndpointSecurity framework on macOS for Rust.☆21Dec 14, 2023Updated 2 years ago
- This tool parses NTDLL.DLL, extracts all the syscall numbers and helps in making direct syscalls, in order to help evasion.☆15Jun 6, 2022Updated 4 years ago
- yet another hidden LKM hunter☆32Sep 18, 2025Updated last year
- JavaScript for Automation (JXA) macOS agent☆107Jul 30, 2026Updated 2 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Linux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls.☆391Aug 29, 2025Updated last year
- ☆18Feb 14, 2019Updated 7 years ago
- LLVM Pass which inserts an opaque predicate at the end of a function, filled with junk bytes to cause IDA analysis to fail (x86_64)☆14May 11, 2025Updated last year
- Various eBPF programs for tracing network connections☆32Oct 26, 2021Updated 5 years ago
- A step-by-step walkthrough of how to write a Client and a Driver to communicate with each other and boost the priority of a thread.☆20Dec 12, 2023Updated 2 years ago
- Lightweight open-core SIEM in Rust — S3-compatible for logs, Postgres for state.☆74Updated this week
- ☆49Dec 21, 2025Updated 10 months ago
- Kiddy - (linux) kernel identity spoofer☆19Mar 18, 2024Updated 2 years ago
- An SSHCA that uses a standard Yubikey to issue new host and user certificates.☆49Oct 20, 2026Updated last week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Farm-to-table, organic, handcrafted, delicious Webassembly☆15Dec 7, 2021Updated 4 years ago
- A parser/timeline creator for auditd logs.☆16Aug 5, 2014Updated 12 years ago
- PoC repository for the blog post CopyEscape: Taking Over Docker Hosts with docker cp☆22Aug 9, 2026Updated 2 months ago
- Blog Post: https://blog.doyensec.com/2025/10/08/ksmbd-3.html☆20Oct 8, 2025Updated last year
- ☆23Apr 17, 2026Updated 6 months ago
- Vulnerability analyze☆16Sep 21, 2020Updated 6 years ago
- scanner and recover the agent memshell☆11Mar 7, 2022Updated 4 years ago
- Packer/Protector for x86-64 ELF binaries on Linux☆246Aug 4, 2021Updated 5 years ago
- Retrospective Analysis☆16Sep 11, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Windows named pipe hooking toolkit☆46Mar 20, 2026Updated 7 months ago
- Code injection from Linux kernel to a process☆23May 19, 2023Updated 3 years ago
- Ivanti EPM AgentPortal RCE Vulnerability☆20Sep 16, 2024Updated 2 years ago
- A Proof-of-Concept using Cache Smuggling + Exif data to passively download a second stage payload☆68Oct 28, 2025Updated last year
- AI-based implant feature☆25Apr 28, 2025Updated last year
- The vulnerable recurrence docker environment for CVE-2022-44268☆10Feb 3, 2023Updated 3 years ago
- ☆15Mar 27, 2026Updated 7 months ago