google / nsjail
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
☆2,982Updated 2 weeks ago
Related projects ⓘ
Alternatives and complementary repositories for nsjail
- syzkaller is an unsupervised coverage-guided kernel fuzzer☆5,391Updated this week
- Low-level unprivileged sandboxing tool used by Flatpak and similar projects☆3,969Updated 3 weeks ago
- Fully static, unprivileged, self-contained, containers as executable binaries.☆2,514Updated 5 years ago
- Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)☆3,081Updated last week
- Linux system exploration and troubleshooting tool with first class support for containers☆7,787Updated last month
- Record and Replay Framework☆9,196Updated this week
- Wrangling Untrusted File Formats Safely☆4,182Updated 2 weeks ago
- like ~~grep~~ UBER, but for binaries☆1,711Updated last year
- A linux-based assembly REPL for x86, amd64, armv7, and armv8☆1,152Updated 8 months ago
- Generate sandboxes for C/C++ libraries automatically☆1,668Updated this week
- Content-Addressable Data Synchronization Tool☆1,510Updated 11 months ago
- DOM fuzzer☆1,696Updated last week
- QEMU Interactive Runtime Analyser☆3,961Updated 2 years ago
- Linux namespaces and seccomp-bpf sandbox☆5,820Updated this week
- Platform for Architecture-Neutral Dynamic Analysis☆2,491Updated 2 weeks ago
- A powerful and user-friendly binary analysis platform!☆7,604Updated this week
- chw00t - Unices chroot breaking tool☆561Updated 5 years ago
- unfork(2) is the inverse of fork(2). sort of.☆1,464Updated 7 months ago
- Checksec☆2,031Updated 3 weeks ago
- A hacky debugger UI for hackers☆6,182Updated 4 months ago
- GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Li…☆7,011Updated last week
- A userspace out-of-memory killer☆1,821Updated 3 weeks ago
- Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.☆3,048Updated 3 years ago
- OSS-Fuzz - continuous fuzzing for open source software.☆10,582Updated this week
- Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)☆7,661Updated last week
- A superoptimizer for LLVM IR☆2,169Updated 2 months ago
- Some helpful preload libraries for pwning stuff.☆1,576Updated 6 months ago
- A kernel designed to run one and only one application in a virtualized environment☆2,655Updated this week
- MirageOS is a library operating system that constructs unikernels☆2,565Updated last week
- High-level tracing language for Linux☆8,651Updated this week