armosec / curing
io_uring based rootkit
☆70Updated this week
Alternatives and similar repositories for curing:
Users that are interested in curing are comparing it to the libraries listed below
- Demonstrate ability to read memfd_secret() data from the kernel☆58Updated last year
- Minimal setup to trigger the xz backdoor☆27Updated 6 months ago
- ☆23Updated 7 months ago
- A library for intercepting system calls☆74Updated 3 months ago
- Linux kernel - See Landlock issues☆40Updated 3 weeks ago
- DSL language to write seccomp filters☆37Updated last year
- A tool to help you understand TPM commands and responses.☆42Updated 4 months ago
- A collection of ideas for new kernel features☆54Updated 6 months ago
- Explore a live Linux kernel's memory using GDB☆114Updated 2 years ago
- A dynamic library bundling the guest payload consumed by libkrun☆86Updated last month
- sandbox demo☆11Updated last year
- Helps run tests in virtual machines☆123Updated 2 months ago
- eBPF-Direct is a high-performance serverless execution layer that runs functions directly inside the Linux kernel using eBP☆22Updated 3 weeks ago
- An SSH metadata analyser used to showcase a timing-based attack on the protocol.☆27Updated 10 months ago
- Got a bogus CVE someone got for a non-vuln? Please share here!☆24Updated 9 months ago
- Systemd Hardening Helper - Mirror of https://github.com/desbma/shh☆121Updated 2 weeks ago
- A proof-of-concept Linux clone of Santa, Google's binary authorization system for macOS☆30Updated 2 years ago
- Mirror only. Official repository at https://git.glasklar.is/system-transparency/core/system-transparency☆86Updated last month
- ☆45Updated last year
- ☆86Updated 9 months ago
- UAPI Group Specifications☆105Updated 4 months ago
- Bertie TLS 1.3 Implementation☆118Updated last week
- Blessed sanctum, save us || Sanctum is a small, reviewable, capable, pq-safe and fully privilege seperated VPN daemon. || This is a read-…☆47Updated this week
- Provides a way to monitor cryptographic operations performed on a system☆14Updated 6 months ago
- Linux kernel source tree with OpenPaX patch☆92Updated last month
- Simple syscall sandboxing for Linux☆130Updated this week
- ☆99Updated last week
- Rewritten Clevis TPM2 PIN☆16Updated 11 months ago
- Checks for tpm vulnerabilities☆37Updated 2 years ago
- 🌐🐧 Browsable Linux kernel syscall tables built with Systrack (https://github.com/mebeim/systrack)☆171Updated 2 weeks ago