Patching and hooking the Linux kernel with only a stripped Linux kernel image.
-
Updated
Sep 1, 2026 - C
#
kernel-security
Here are 55 public repositories matching this topic...
KASLD derandomizes the Linux kernel's virtual and physical memory layout from a local process, using whatever its vantage — privilege, configuration, and confinement — allows.
linux security kernel linux-kernel pentesting kernel-exploitation aslr ctf-tools side-channel-attacks exploit-development kernel-exploit aslr-bypass kaslr linux-kaslr kernel-security kaslr-bypass microarchitectural-attacks linux-aslr kernel-aslr
-
Updated
Sep 1, 2026 - C
Utility to find hidden Linux kernel modules
-
Updated
May 2, 2026 - C
Linux & Android Kernel Vulnerability research and exploitation
linux pwn exploitation kernel-exploitation privilege-escalation lpe linux-kernel-hacking kernel-bypass vulnerability-research privilege-escalation-exploits kernel-security
-
Updated
Dec 12, 2023
-
Updated
Apr 10, 2023 - Python
Minimal no-libc Linux x86_64 ELF PoC build for Copy Fail (CVE-2026-31431)
x86-64 splice linux-kernel poc elf af-alg linux-security security-research vulnerability-research kernel-security no-libc cve-2026-31431 copy-fail tiny-elf algif-aead
-
Updated
May 3, 2026 - Shell
Educational Linux kernel rootkit PoC exploring DKOM, syscall hooking, stealth, observability and defensive detection
linux kernel rootkit linux-kernel cybersecurity educational malware-research ebpf dkom offensive-security security-research detection-engineering kernel-security
-
Updated
Aug 9, 2026 - C
Advanced kernel-native security framework to disrupt and prevent DNS-based breaches including C2 channels and tunneling with zero data loss. Combines TC, Netfilter, raw socket interception, BPF maps, and ring buffers, runs entirely on eBPF in the Linux kernel. Integrates with deep learning for advanced intelligent EDR
golang crypto tensorflow linux-kernel apache-kafka ebpf seccomp xdp qos conntrack traffic-control kernel-keyring linux-kernel-net lsm data-loss-prevention tracepoint cilium-ebpf dns-security kernel-security kernel-datapath
-
Updated
Jul 6, 2026 - Go
Curated Linux LPE corpus — 28 modules from 2016 to 2026, with detection rules. One command, safest-first root: skeletonkey --auto --i-know
pentesting auditd cve sigma privilege-escalation blueteam linux-security detection-rules redteam exploit-development kernel-security
-
Updated
Aug 31, 2026 - C
Offensive & defensive Linux kernel security research focused on rootkit behavior, observable artifacts and detection.
research kernel-module rootkit linux-kernel cybersecurity malware-research ebpf dkom offensive-security defense security-research defensive-security detection-engineering kernel-security
-
Updated
Aug 9, 2026 - C
Xen hypervisor protection for guest kernel memory integrity enforcement
rust security xen virtualization hypervisor systems-programming livepatch kernel-security memory-integrity guest-introspection
-
Updated
Aug 29, 2026 - Rust
plan-bound authorization architecture for governing privileged effects in untrusted computational agents.
ai kernel authorization sandboxing access-control computer-security system-security trusted-computing least-privilege capability-security trustworthy-ai kernel-security agentic-ai ai-saftey agentic-ai-safety
-
Updated
Jun 23, 2026
Synapse is a lightweight Lua scripting environment designed for script development, testing, and debugging. It offers a rich set of features, stable performance, and an intuitive interface, making it suitable for both beginners and experienced programmers. The tool is built with a focus on reliability and ease of use, supporting various automation.
lua script roblox velocity rbx pure-lua lua51 lua53 rlua pet-finder script-ware reanimate scriptware lua-benchmark kernel-security netbypass bloxburg oxygen-external rivals-script
-
Updated
Aug 28, 2026 - C++
Project Chronos — eBPF/XDP covert timing-channel PoC for security research. Demonstrates kernel-level passive monitoring, IAT modulation, process masquerading & anti-forensics techniques. Built for Blue Team detection R&D.
proof-of-concept linux-kernel cybersecurity ebpf xdp covert-channel network-security anti-forensics security-research blue-team threat-detection edr-evasion kernel-security process-masquerading timing-channel
-
Updated
Apr 29, 2026 - C
Open-source hypervisor-based endpoint security. Ring -1 monitoring for Intel VT-x and AMD-V. Rootkit detection, DKOM, MSR guard, stealth EPT hooks.
security c99 virtualization linux-kernel hypervisor cybersecurity bare-metal systems-programming vt-x malware-detection anti-rootkit edr ept blue-pill endpoint-security amd-v kernel-security rootkit-detection ring-minus-one memory-introspection
-
Updated
Apr 18, 2026 - C
Look for possible escape vectors from a container
linux docker kubernetes aws azure linux-kernel cicd cve-scanning devsecops container-security kernel-hardening kubernetes-security kernel-security
-
Updated
Aug 31, 2026 - Shell
An educational Secure Boot and Kernel Integrity Verification system demonstrating chain of trust, kernel signing, and protection against boot-level attacks using SHA-256 and RSA-2048.
security kernel attack command-line linux-kernel cybersecurity kali-linux rsa-cryptography boot-loader security-tools uefi-boot bios-settings uefi-secureboot verification-code rsa-2048 kali-linux-tools varification verification-system kernel-security sha-256-hash
-
Updated
Dec 12, 2025 - C
A read-only Linux analyzer that maps kernel attack surface to the workloads using it and generates evidence-backed, reversible hardening plans.
-
Updated
Sep 1, 2026 - TypeScript
ARM64 Android kernel research for the Samsung Galaxy S23 Ultra (SM-S918B)
-
Updated
Aug 13, 2026 - C
Add this topic to your repo
To associate your repository with the kernel-security topic, visit your repo's landing page and select "manage topics."