LID — Linux Integrity Drift: Bypassing AppArmor via eBPF pathname rewriting. Pre-LSM syscall argument manipulation with zero audit footprint. "Linux is Dying"
☆20May 25, 2026Updated 3 months ago
Alternatives and similar repositories for LID
Users that are interested in LID are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- SunnyDayBPF: eBPF-based post-syscall user-buffer telemetry deception research by Azizcan Daştan☆24Aug 5, 2026Updated last month
- ☆20Apr 8, 2023Updated 3 years ago
- Interactive Shells like PsExec, but in Go☆16Apr 30, 2025Updated last year
- A BOF designed to inspect processes memory and addresses☆40Apr 19, 2026Updated 4 months ago
- BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR☆21Feb 8, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Advanced Android RAT Framework for Authorized Security Testing | Supports Android 5.0-16 | Telegram Integration | Multi-Device Management☆20Mar 6, 2026Updated 6 months ago
- Temodar Agent is an AI-powered WordPress plugin and theme security analysis platform built for security researchers, product security tea…☆60Jul 3, 2026Updated 2 months ago
- PowerShell tool that shows how to read and write NTLM OWF values via samlib.dll.☆75Oct 22, 2025Updated 10 months ago
- RazerKit For Razer Products, RGB Control, Web UI etc☆19Jul 8, 2026Updated 2 months ago
- ☆14Jul 29, 2024Updated 2 years ago
- Create Entra Global Admin accounts from On-Prem☆25Jul 28, 2025Updated last year
- Async BOF that monitors USB device connect/disconnect events, reports device information and performs actions on connected USB storage vo…☆58Jul 23, 2026Updated last month
- ☆94Updated this week
- Linux Kernel Exploitation CTF Lab☆26Feb 16, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Windows kernel research tool. Looks like a debugger, but it is not a debugger. It uses a kernel driver to provide a WinDbg-like live kern…☆74Updated this week
- MAD-CAT (Meow Attack Data Corruption Automation Tool) is a comprehensive security tool designed to simulate data corruption attacks again…☆38Oct 11, 2025Updated 11 months ago
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆29Jul 23, 2026Updated last month
- A lightweight, multi-layer Linux sandbox combining namespaces, pivot_root, seccomp-bpf, capability dropping, and an evidence-based verdic…☆74Aug 26, 2026Updated 2 weeks ago
- InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution☆314Aug 22, 2026Updated 3 weeks ago
- This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…☆37Jan 15, 2022Updated 4 years ago
- Autonomous Windows POC developer from patchwatch diff reports☆69Jul 30, 2026Updated last month
- Hardware-centric Linux kernel debloater☆15Nov 28, 2023Updated 2 years ago
- A local tool for ingesting Windows Patch Tuesday CVEs, diffing patched binaries with Ghidriff and surfacing LLM-generated security analys…☆58Jul 31, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆12Apr 23, 2019Updated 7 years ago
- ☆19Aug 24, 2022Updated 4 years ago
- Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advance…☆117Jun 30, 2026Updated 2 months ago
- ☆12Mar 5, 2026Updated 6 months ago
- Full-stack Amazon India-inspired e-commerce clone built with Next.js, TypeScript, Prisma, MongoDB, and Stripe.☆22Sep 2, 2026Updated last week
- Discover Non-Discoverable Bluetooth Classic devices☆15Oct 10, 2024Updated last year
- Various Write Ups from OverTheWire, TryHackMe, HackTheBox, CrackMes.one and more!☆12Dec 25, 2022Updated 3 years ago
- Validate semantic equivalence between C++ and Rust LLVM IR using State-Of-The-Art Verification☆15Dec 11, 2024Updated last year
- Proof-of-Concept to evade auditd by tampering via ptrace☆19Aug 3, 2023Updated 3 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Useful OSINT tools for Discord☆26Jan 21, 2026Updated 7 months ago
- A Kubernetes Forensic Collection Framework for Azure Kubernetes Service☆44Feb 9, 2026Updated 7 months ago
- Beacon Object File (BOF) for Using the BadSuccessor Technique for Account Takeover☆90Oct 20, 2025Updated 10 months ago
- A Proof-of-Concept bootkit and UEFI boot application inspired by Petya ransomware, written in Assembly, C, and C++☆271Updated this week
- lsassdump via RtlCreateProcessReflection and NanoDump☆86Oct 18, 2024Updated last year
- Document Automation Reference Kit☆16Jun 27, 2024Updated 2 years ago
- SoftICE-like debugger for Windows 2000 and XP. Archived.☆21Dec 23, 2022Updated 3 years ago