Alternatives and similar repositories for curing

Users that are interested in curing are comparing it to the libraries listed below

• hackerschoice / bpfhacks
  eBPF hacks
  ☆190Updated last year
• DualHorizon / blackpill
  A Linux kernel rootkit in Rust using a custom made type-2 hypervisor, eBPF XDP and TC programs
  ☆335Updated 6 months ago
• hardenedlinux / userland-exec
  Userland exec PoC to be used as attack vector technique
  ☆93Updated 2 months ago
• eurecom-s3 / lemon
  eBPF Memory Dump Tool
  ☆96Updated 4 months ago
• hackerschoice / memexec
  Circumventing "noexec" mount flag to execute arbitrary linux binaries by ptrace-less process injection
  ☆135Updated 7 months ago
• vimpostor / copycat
  A library for intercepting system calls
  ☆103Updated 11 months ago
• thalium / rkchk
  Rust Linux Kernel Module designed for LKM rootkit detection
  ☆56Updated 9 months ago
• blasty / JiaTansSSHAgent
  ☆136Updated last year
• h2337 / modreveal
  Utility to find hidden Linux kernel modules
  ☆147Updated 5 months ago
• hackerschoice / zapper
  Zaps arguments and environment from the process list
  ☆238Updated last year
• adgaultier / tamanoir
  An eBPF🐝 Keylogger with C2-based RCE payload delivery
  ☆307Updated 7 months ago
• mandiant / gostringungarbler
  Python tool to resolve all strings in Go binaries obfuscated by garble
  ☆177Updated 10 months ago
• lockness-Ko / xz-vulnerable-honeypot
  An ssh honeypot with the XZ backdoor. CVE-2024-3094
  ☆145Updated last year
• adgaultier / caracal
  Make your programs stealthier🐝
  ☆196Updated 6 months ago
• eeriedusk / nysm
  nysm is a stealth post-exploitation container.
  ☆265Updated 6 months ago
• hardenedvault / ved-ebpf
  VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF
  ☆167Updated last year
• quarkslab / peetch
  An eBPF playground
  ☆210Updated 2 years ago
• Acceis / eBPF-hide-PID
  This tool have the power to hide any PID/directory in the Linux kernel
  ☆30Updated last year
• recontech404 / Kairos
  Open Source eBPF Malware Analysis Framework
  ☆53Updated last year
• skyler-ferrante / CVE-2024-28085
  WallEscape vulnerability in util-linux
  ☆52Updated last year
• redcanaryco / ebpfmon
  ☆89Updated 3 weeks ago
• anvilsecure / ulexecve
  ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries…
  ☆197Updated last year
• BishopFox / asminject
  Heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly (or precompiled binary) payloads directly into x86…
  ☆143Updated 3 years ago
• aquasecurity / traceeshark
  Deep Linux runtime visibility meets Wireshark
  ☆299Updated last month
• antitree / seccomp-diff
  ☆85Updated 2 months ago
• Velocidex / Linpmem
  Linpmem is a linux memory acquisition tool
  ☆95Updated 6 months ago
• Vali-Cyber / ebpf-attacks
  A collection of bypasses and exploits for eBPF-based cloud security.
  ☆25Updated last year
• MatheuZSecurity / detect-lkm-rootkit-cheatsheet
  Cheat sheet to detect and remove linux kernel rootkit
  ☆77Updated last year
• kpcyrd / sh4d0wup
  Signing-key abuse and update exploitation framework
  ☆131Updated 7 months ago
• avolens / kubefuzz
  Generative and mutative fuzzer for Kubernetes admission controller chains by automatically parsing the cluster api specification.
  ☆75Updated 2 years ago