LID — Linux Integrity Drift: Bypassing AppArmor via eBPF pathname rewriting. Pre-LSM syscall argument manipulation with zero audit footprint. "Linux is Dying"
☆19May 25, 2026Updated 2 months ago
Alternatives and similar repositories for LID
Users that are interested in LID are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- SunnyDayBPF: eBPF-based post-syscall user-buffer telemetry deception research by Azizcan Daştan☆24May 26, 2026Updated 2 months ago
- ☆20Apr 8, 2023Updated 3 years ago
- Interactive Shells like PsExec, but in Go☆16Apr 30, 2025Updated last year
- A BOF designed to inspect processes memory and addresses☆40Apr 19, 2026Updated 3 months ago
- BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR☆21Feb 8, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Advanced Android RAT Framework for Authorized Security Testing | Supports Android 5.0-16 | Telegram Integration | Multi-Device Management☆18Mar 6, 2026Updated 4 months ago
- Temodar Agent is an AI-powered WordPress plugin and theme security analysis platform built for security researchers, product security tea…☆59Jul 3, 2026Updated last month
- PowerShell tool that shows how to read and write NTLM OWF values via samlib.dll.☆74Oct 22, 2025Updated 9 months ago
- RazerKit For Razer Products, RGB Control, Web UI etc☆17Jul 8, 2026Updated 3 weeks ago
- ☆14Jul 29, 2024Updated 2 years ago
- ☆18May 25, 2026Updated 2 months ago
- ProxyPanther is an enterprise-grade reverse proxy and web application firewall (WAF) platform built for professionals who demand control,…☆17Apr 30, 2026Updated 3 months ago
- Create Entra Global Admin accounts from On-Prem☆25Jul 28, 2025Updated last year
- Async BOF that monitors USB device connect/disconnect events, reports device information and performs actions on connected USB storage vo…☆57Jul 23, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- OpenCode plugin for automatic API-key failover and rotation across multiple provider keys☆45Jul 23, 2026Updated last week
- ☆86Jul 19, 2026Updated 2 weeks ago
- Linux Kernel Exploitation CTF Lab☆26Feb 16, 2026Updated 5 months ago
- Windows kernel research tool. Looks like a debugger, but it is not a debugger. It uses a kernel driver to provide a WinDbg-like live kern…☆71Updated this week
- MAD-CAT (Meow Attack Data Corruption Automation Tool) is a comprehensive security tool designed to simulate data corruption attacks again…☆37Oct 11, 2025Updated 9 months ago
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆29Jul 23, 2026Updated last week
- A lightweight, multi-layer Linux sandbox combining namespaces, pivot_root, seccomp-bpf, capability dropping, and an evidence-based verdic…☆74Jul 25, 2026Updated last week
- This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…☆36Jan 15, 2022Updated 4 years ago
- Autonomous Windows POC developer from patchwatch diff reports☆67Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Hardware-centric Linux kernel debloater☆15Nov 28, 2023Updated 2 years ago
- A local tool for ingesting Windows Patch Tuesday CVEs, diffing patched binaries with Ghidriff and surfacing LLM-generated security analys…☆56Updated this week
- ☆19Aug 24, 2022Updated 3 years ago
- ☆12Apr 23, 2019Updated 7 years ago
- Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advance…☆114Jun 30, 2026Updated last month
- ☆12Mar 5, 2026Updated 4 months ago
- Discover Non-Discoverable Bluetooth Classic devices☆14Oct 10, 2024Updated last year
- Full-stack Amazon-inspired e-commerce platform built with Next.js, TypeScript, Prisma, MongoDB, and Stripe.☆20Jun 2, 2026Updated 2 months ago
- David Lin's Windows 10 Cheatsheet☆11Mar 5, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Centralized multi-cluster Kubernetes observability platform — real-time dependency mapping, impact analysis, change detection, and securi…☆59Updated this week
- Proof-of-Concept to evade auditd by tampering via ptrace☆19Aug 3, 2023Updated 3 years ago
- Useful OSINT tools for Discord☆25Jan 21, 2026Updated 6 months ago
- A Kubernetes Forensic Collection Framework for Azure Kubernetes Service☆43Feb 9, 2026Updated 5 months ago
- Beacon Object File (BOF) for Using the BadSuccessor Technique for Account Takeover☆91Oct 20, 2025Updated 9 months ago
- A Proof-of-Concept bootkit inspired by Petya ransomware, written in Assembly, C, and C++☆259Jun 18, 2026Updated last month
- lsassdump via RtlCreateProcessReflection and NanoDump☆87Oct 18, 2024Updated last year