Alternatives and similar repositories for santa-linux

Users that are interested in santa-linux are comparing it to the libraries listed below

• milabs / lkrg-bypass
  LKRG bypass methods
  ☆73Updated 5 years ago
• theevilbit / macos
  ☆33Updated last year
• nccgroup / insject
  insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.
  ☆50Updated 3 years ago
• immune-gmbh / tpm-vuln-checker
  Checks for tpm vulnerabilities
  ☆38Updated 2 years ago
• ForensicITGuy / libpreloadvaccine
  Whitelisting LD_PRELOAD libraries using LD_AUDIT
  ☆63Updated 4 years ago
• mdowd79 / presentations
  ☆79Updated last year
• etke / checksec.rs
  Fast multi-platform (ELF/PE/MachO) binary checksec written in Rust.
  ☆119Updated last year
• milabs / stamina
  (Linux Kernel) Stack Monitoring Tool
  ☆48Updated 3 years ago
• ald3ns / XPR-dump
  Helper scripts to automate the extraction of YARA rules from XProtectRemediators
  ☆22Updated last year
• JonathonReinhart / nosecmem
  Demonstrate ability to read memfd_secret() data from the kernel
  ☆58Updated 2 years ago
• xorrior / xpcutil
  Golang Tool to interact with Launchd and other services with XPC
  ☆29Updated 5 years ago
• usbarmory / armory-drive
  Armory Drive - USB encrypted drive with mobile unlock over BLE
  ☆78Updated 4 months ago
• trailofbits / ebpfpub
  ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.
  ☆118Updated 2 weeks ago
• ortegaalfredo / vulns-ai
  Vulnerabilities advisories and PoC
  ☆18Updated last month
• buzzer-re / whoexec
  Discover which process execute a hunted binary inside macOS
  ☆27Updated 4 years ago
• vastlimits / esmat
  macOS Endpoint Security Message Analysis Tool
  ☆47Updated 3 years ago
• msuiche / elegant-bouncer
  ELEGANTBOUNCER is a detection tool for file-based mobile exploits.
  ☆166Updated 3 months ago
• pathtofile / bpf-pipesnoop
  Example program using eBPF to log data being based in using shell pipes
  ☆41Updated 4 years ago
• mgrube / GRUBKit
  Skeleton project for your own GRUB-based bootkit
  ☆16Updated 5 years ago
• redplait / lkcd
  ugly code to check linux kernel memory and dump some internal structures
  ☆48Updated last year
• slyd0g / SwiftParseTCC
  Use "Full Disk Access" permissions to read the contents of TCC.db and display it in human-readable format
  ☆40Updated 4 years ago
• ergot86 / itlb_poc
  iTLB multihit PoC
  ☆42Updated 2 years ago
• trou / rsbkb
  CLI tools: encoders/decoders, CTF and reverse engineering helpers.
  ☆142Updated last month
• ant4g0nist / crashmon
  crashmon - A LLDB Based replacement for CrashWrangler
  ☆46Updated 2 years ago
• 0xbigshaq / redis-afl
  An automated setup for fuzzing Redis w/ AFL++
  ☆34Updated 3 years ago
• airbus-seclab / airbus-seclab.github.io
  Conferences, tools, papers, etc.
  ☆46Updated last month
• claesmnyberg / netfuzz
  Network Traffic Fuzzer
  ☆17Updated last year
• nbulischeck / debugfs-backdoor
  PoC code using debugfs to store files in memory and execute them
  ☆27Updated 7 years ago
• AtropineTears / TheMacHardeningScripts
  Scripts to secure and harden Mac OS X
  ☆30Updated 4 years ago
• SELinuxProject / selint
  Static code analysis of refpolicy style SELinux policy
  ☆46Updated 9 months ago