LID — Linux Integrity Drift: Bypassing AppArmor via eBPF pathname rewriting. Pre-LSM syscall argument manipulation with zero audit footprint. "Linux is Dying"
☆20May 25, 2026Updated 2 months ago
Alternatives and similar repositories for LID
Users that are interested in LID are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- SunnyDayBPF: eBPF-based post-syscall user-buffer telemetry deception research by Azizcan Daştan☆24Aug 5, 2026Updated 2 weeks ago
- ☆20Apr 8, 2023Updated 3 years ago
- Interactive Shells like PsExec, but in Go☆16Apr 30, 2025Updated last year
- A BOF designed to inspect processes memory and addresses☆40Apr 19, 2026Updated 4 months ago
- BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR☆21Feb 8, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- SSH, PGP/GnuPG, Git, and GitHub training☆22Jun 9, 2026Updated 2 months ago
- Advanced Android RAT Framework for Authorized Security Testing | Supports Android 5.0-16 | Telegram Integration | Multi-Device Management☆20Mar 6, 2026Updated 5 months ago
- Temodar Agent is an AI-powered WordPress plugin and theme security analysis platform built for security researchers, product security tea…☆60Jul 3, 2026Updated last month
- PowerShell tool that shows how to read and write NTLM OWF values via samlib.dll.☆75Oct 22, 2025Updated 10 months ago
- RazerKit For Razer Products, RGB Control, Web UI etc☆17Jul 8, 2026Updated last month
- ☆14Jul 29, 2024Updated 2 years ago
- ☆18May 25, 2026Updated 2 months ago
- ProxyPanther is an enterprise-grade reverse proxy and web application firewall (WAF) platform built for professionals who demand control,…☆17Apr 30, 2026Updated 3 months ago
- Async BOF that monitors USB device connect/disconnect events, reports device information and performs actions on connected USB storage vo…☆58Jul 23, 2026Updated last month
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- S I B E R G Ü V E N L I K E Ğ I T I M R E H B E R I E L K I TA B I☆51Jun 23, 2026Updated 2 months ago
- OpenCode plugin for automatic API-key failover and rotation across multiple provider keys☆46Jul 23, 2026Updated last month
- Linux Kernel Exploitation CTF Lab☆26Feb 16, 2026Updated 6 months ago
- Windows kernel research tool. Looks like a debugger, but it is not a debugger. It uses a kernel driver to provide a WinDbg-like live kern…☆72Updated this week
- MAD-CAT (Meow Attack Data Corruption Automation Tool) is a comprehensive security tool designed to simulate data corruption attacks again…☆38Oct 11, 2025Updated 10 months ago
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆29Jul 23, 2026Updated last month
- A lightweight, multi-layer Linux sandbox combining namespaces, pivot_root, seccomp-bpf, capability dropping, and an evidence-based verdic…☆74Jul 25, 2026Updated 3 weeks ago
- This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…☆37Jan 15, 2022Updated 4 years ago
- Autonomous Windows POC developer from patchwatch diff reports☆65Jul 30, 2026Updated 3 weeks ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆12Apr 23, 2019Updated 7 years ago
- Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advance…☆117Jun 30, 2026Updated last month
- ☆12Mar 5, 2026Updated 5 months ago
- Full-stack Amazon-inspired e-commerce platform built with Next.js, TypeScript, Prisma, MongoDB, and Stripe.☆21Aug 7, 2026Updated 2 weeks ago
- Centralized multi-cluster Kubernetes observability platform — real-time dependency mapping, impact analysis, change detection, and securi…☆59Updated this week
- Proof-of-Concept to evade auditd by tampering via ptrace☆19Aug 3, 2023Updated 3 years ago
- Useful OSINT tools for Discord☆25Jan 21, 2026Updated 7 months ago
- A Kubernetes Forensic Collection Framework for Azure Kubernetes Service☆44Feb 9, 2026Updated 6 months ago
- Beacon Object File (BOF) for Using the BadSuccessor Technique for Account Takeover☆90Oct 20, 2025Updated 10 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A Proof-of-Concept bootkit inspired by Petya ransomware, written in Assembly, C, and C++☆263Jun 18, 2026Updated 2 months ago
- lsassdump via RtlCreateProcessReflection and NanoDump☆86Oct 18, 2024Updated last year
- SoftICE-like debugger for Windows 2000 and XP. Archived.☆21Dec 23, 2022Updated 3 years ago
- ☆13Dec 24, 2024Updated last year
- AVX implementation of the Skinny block cipher☆12Apr 24, 2022Updated 4 years ago
- Linux Persistence Detection, Hunting and Artifact Collection script☆25Jul 20, 2026Updated last month
- A not so awesome list of adversary emulation gems for aspiring red/blue/purple teamers☆16Jul 19, 2022Updated 4 years ago