An eBPF-powered Active Defense system that turns your Linux server into a deceptive honeypot. Features transparent traffic redirection, OS fingerprint spoofing, kernel-level DLP, and Zero Trust SSH access (SPA).
☆73Jul 10, 2026Updated last month
Alternatives and similar repositories for phantom-grid
Users that are interested in phantom-grid are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Exploit for ToolShell☆15Nov 20, 2025Updated 8 months ago
- Cosmic Rowhammer - Crowdsourcing random bitflips for exploitation☆25Mar 18, 2026Updated 4 months ago
- A critical RCE vulnerability in Windows TCP/IP stack (CVE-2025-26686) leaves sensitive memory unlocked, allowing remote attackers to hija…☆31Sep 16, 2025Updated 10 months ago
- Linux LPE - Reliable Jail/Container Escape☆53Jun 29, 2026Updated last month
- r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems☆11Aug 6, 2018Updated 8 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Intel 64/Windows low-level experiments☆108Jul 21, 2026Updated 2 weeks ago
- A proof‑of‑concept C2 framework that uses Server‑Sent Events (SSE) and the MCP protocol for agent registration, command dispatch, and res…☆35Apr 28, 2025Updated last year
- ☆10Feb 10, 2022Updated 4 years ago
- Dreg's setup for lldb reversing. The simplest and easiest possible, without scripting. lldb debugging setup.☆15May 2, 2024Updated 2 years ago
- A Linux kernel rootkit in Rust using a custom made type-2 hypervisor, eBPF XDP and TC programs☆340Feb 27, 2026Updated 5 months ago
- ☆16Jan 2, 2026Updated 7 months ago
- Porting Windows Dynamic Link Libraries to Linux☆21Jun 11, 2025Updated last year
- Encode shellcode as XML-looking data. Single-header C library with a two-stage PIC loader example.☆15Feb 11, 2026Updated 5 months ago
- A tracker DLL which enables 'NTAPI->Syscall' tracking whenever it is loaded. It calls 'NtSetInformationProcess' API call with a callback …☆14Oct 21, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆28Sep 4, 2024Updated last year
- Slides and resources from MCTTP 2025 Talk☆70Oct 26, 2025Updated 9 months ago
- A Lazy Programmer's Tips for Avoiding the SOC ~ BSides Belfast 2024☆17Sep 12, 2024Updated last year
- This is a powershell module to help implement the AD Tier Model☆17Feb 17, 2026Updated 5 months ago
- executing shellcode directly from a python variable☆30Dec 20, 2025Updated 7 months ago
- ☆80Jul 12, 2025Updated last year
- Linux kernel integrity monitor for detecting syscall hooking☆88Feb 16, 2026Updated 5 months ago
- Commandline spoofing on Windows☆100Jul 19, 2026Updated 3 weeks ago
- Power Automate C2 (PAC2) : Stealth living-off-the-cloud C2 framework.☆39Apr 16, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Some security by obscurity using port-jumping.☆14Jul 3, 2026Updated last month
- Rust implementation, creating a scheduled task programmatically with user logon trigger.☆47Jun 10, 2025Updated last year
- Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1☆81Sep 8, 2025Updated 11 months ago
- AI-powered SOC for OT/ICS networks — 6 autonomous agents, MITRE ATT&CK mapping, Suricata/Zeek ingestion, human-in-the-loop response, 330+…☆31Updated this week
- IoT Firmware Deep Analysis: Automated reverse engineering and vulnerability discovery for IoT firmware binaries.☆38Jul 29, 2026Updated last week
- In-depth reverse engineering of a suspected LockBit affiliate dropper, documenting shellcode loading, import polymorphism, and payload de…☆15Jan 24, 2026Updated 6 months ago
- ☆17Aug 17, 2025Updated 11 months ago
- A declarative markup DSL for building GPUI applications☆15Aug 3, 2026Updated last week
- ARM TrustZone Audit: Securing vs. Non-Securing Memory Separation☆25Mar 1, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- AD CS exploitation related stuff goes here☆25Mar 23, 2026Updated 4 months ago
- Binary Only Thread Sanitizer☆18Aug 10, 2024Updated 2 years ago
- Packet Monkey is a tool to filter and classify PCAPs using Wireshark filters☆14Feb 27, 2026Updated 5 months ago
- A BOF designed to inspect processes memory and addresses☆40Apr 19, 2026Updated 3 months ago
- Simple root privilege escalation detection using eBPF 🐝☆35Jul 16, 2026Updated 3 weeks ago
- Selective In-Memory Syscall Unhooking, a stealthy method to bypass user-mode hooks in ntdll.dll☆41Mar 11, 2026Updated 4 months ago
- A cross-platform, collaborative C2 for red-teaming. Agents are cross-compilable (e.g, you can generate Windows DLLs on Linux), cross-comp…☆23Mar 7, 2025Updated last year