theSecHunter/Hades-Linux external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

theSecHunter/Hades-Linux

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/theSecHunter/Hades-Linux)

Close

theSecHunter / Hades-LinuxView on GitHubMore

• External links
• Readme badge

Hades is a Host-Based Intrusion Detection System based on both eBPF(kernel) and netlink/cn_proc(userspace).

☆28Dec 14, 2024Updated last year

Alternatives and similar repositories for Hades-Linux

Users that are interested in Hades-Linux are comparing it to the libraries listed below

• theSecHunter / Hades-Windows

  View on GitHub
  Hades HIDS/HIPS for Windows
  ☆307Oct 10, 2025Updated 4 months ago
• chaitin / systracer

  View on GitHub
  SysTracer: Linux 系统活动跟踪器
  ☆34Dec 14, 2022Updated 3 years ago
• okppp990 / phishlets

  View on GitHub
  ☆11Jul 11, 2023Updated 2 years ago
• theSecHunter / Hades

  View on GitHub
  Hades is an cross-platform HIDS with kernel-space data collection.
  ☆50May 29, 2023Updated 2 years ago
• oXis / DoublePulsarPayload

  View on GitHub
  C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.
  ☆31Nov 9, 2021Updated 4 years ago
• timwhitez / Bof2PIC

  View on GitHub
  BOF/COFF obj file to PIC(shellcode). by golang
  ☆39Sep 28, 2022Updated 3 years ago
• latortuga71 / DisablePPLDriverPoc

  View on GitHub
  Disable PPL via custom driver and dump lsass
  ☆15Mar 13, 2021Updated 4 years ago
• MythicAgents / atlas

  View on GitHub
  ☆13Dec 27, 2023Updated 2 years ago
• badboycxcc / Beacon

  View on GitHub
  重构Beacon
  ☆15Aug 25, 2024Updated last year
• synacktiv / mojarragadget

  View on GitHub
  ☆15Oct 25, 2021Updated 4 years ago
• cyxshizhu / OA-ezOFFICE

  View on GitHub
  ☆12Jul 23, 2021Updated 4 years ago
• Wker666 / javaHookFrameWork

  View on GitHub
  反编译 源代码级别的hook
  ☆37Aug 12, 2022Updated 3 years ago
• huoji120 / safe_duck

  View on GitHub
  一款linux下的安全产品目的是满足个人安全需求有SSH爆破防护和SYN攻击扫描防护功能,基于netfilter,
  ☆23Dec 2, 2023Updated 2 years ago
• zimnyaa / nim-noload-dll-hollowing

  View on GitHub
  Unused DLL hollowing PoC in Nim
  ☆17Jan 31, 2022Updated 4 years ago
• breakpointHQ / snoop

  View on GitHub
  Secretly record audio and video with chromium based browsers.
  ☆23Feb 14, 2024Updated 2 years ago
• SagerNet / sing-shadowtls

  View on GitHub
  Some internet celebrity protocols
  ☆23May 3, 2025Updated 9 months ago
• SummerSec / Loader

  View on GitHub
  动态链接库加载工具
  ☆20Jan 26, 2022Updated 4 years ago
• hongson11698 / defender-database-extract

  View on GitHub
  defender_database
  ☆24Oct 31, 2023Updated 2 years ago
• webraybtl / ysoserialbtl

  View on GitHub
  基于ysoserial扩展命令执行结果回显，生成冰蝎内存马
  ☆89Jul 6, 2023Updated 2 years ago
• taielab / YinGuard

  View on GitHub
  隐卫一款基于 Bash 开发的 Linux 应急响应自动化脚本
  ☆48Aug 18, 2025Updated 6 months ago
• Colerar / labyrinth

  View on GitHub
  Labyrinth, an LLVM obfuscation plugin for the New Pass Manager
  ☆44Feb 23, 2025Updated last year
• ldsaiyan / EventLogPersist

  View on GitHub
  A Simple Proof Code for Extracting and Executing Shellcode from Event Logs
  ☆27Mar 5, 2023Updated 2 years ago
• huoji120 / DuckSandboxDetect

  View on GitHub
  沙箱测试,测评国内常见沙箱的代码与结论
  ☆107Jul 3, 2021Updated 4 years ago
• riesha / drv-vuln-scanner

  View on GitHub
  Finds imports that could be exploited, still requires manual analysis.
  ☆29Nov 9, 2022Updated 3 years ago
• frank2 / oxide

  View on GitHub
  A PoC packer written in Rust!
  ☆74Apr 1, 2022Updated 3 years ago
• wooluo / SSlogs

  View on GitHub
  应急分析溯源日志工具：一个功能强大的Web日志安全分析工具，集成了规则引擎、AI智能分析和多格式报告生成，专为安全应急响应和威胁溯源而设计。
  ☆106Oct 28, 2025Updated 4 months ago
• huoji120 / ai-webshell-detect

  View on GitHub
  机器学习检测webshell
  ☆70Jun 19, 2021Updated 4 years ago
• Octoberfest7 / KillDefender_BOF

  View on GitHub
  Beacon Object File implementation of pwn1sher's KillDefender
  ☆67Jun 28, 2022Updated 3 years ago
• ainrm / safeGate

  View on GitHub
  一个基于openresty开发的安全网关demo
  ☆30Mar 3, 2022Updated 3 years ago
• Kara-4search / PEB-PPIDspoofing_Csharp

  View on GitHub
  Command line & PPID spoofing
  ☆29Apr 15, 2023Updated 2 years ago
• passer-W / Supershell-Counter

  View on GitHub
  Supershell反制
  ☆32Aug 8, 2023Updated 2 years ago
• AlmondOffSec / LibTPLoadLib

  View on GitHub
  Using call gadgets to break the call stack signature used by Elastic on proxying a module load. Provided as a Crystal Palace shared libra…
  ☆75Nov 6, 2025Updated 3 months ago
• gojue / ehids-agent

  View on GitHub
  A Linux Host-based Intrusion Detection System based on eBPF.
  ☆457Dec 20, 2023Updated 2 years ago
• njcx / RuleCat

  View on GitHub
  GO开发而成，用于NIDS HIDS 分析的规则引擎，使用WorkerPool 高性能检测，支持多字段 "和" "或" 检测， 支持频率检测
  ☆78Feb 8, 2025Updated last year
• DODC / turncoat

  View on GitHub
  ☆41Apr 5, 2025Updated 10 months ago
• N4kedTurtle / ExecuteAssembly_Mailslot

  View on GitHub
  ☆38Oct 12, 2020Updated 5 years ago
• j3ssie / codeql-docker

  View on GitHub
  Ready to use docker image for CodeQL
  ☆90Jan 10, 2024Updated 2 years ago
• PowerLZY / Bold-Falcon

  View on GitHub
  毕方智能云沙箱(Bold-Falcon)是一个开源的自动化恶意软件分析系统;
  ☆158Mar 30, 2023Updated 2 years ago
• shogunlab / Sukoshi

  View on GitHub
  Sukoshi is a proof-of-concept Python/C++ implant that leverages the MQTT protocol for C2 and uses AWS IoT Core as infrastructure.
  ☆47Mar 26, 2022Updated 3 years ago