Linux process enumeration tool for hardened environments

Suhosin Extension for PHP 7.x

Openwall GNU/*/Linux (Owl) is a small security-enhanced Linux distribution for servers. Owl has reached its end-of-life, but its legacy lives on in a few other distributions (most notably, ALT Linux) and upstream projects. This is an export of the Owl CVS repository into Git.

S.A.R.A. development branch. Rebased often. Use at your own risk.

(Automatic Docker Hub build of) SSH tarpit that slowly sends an endless banner

Lightweight, secure and login like console display manager for X

SUHOSIN [수호신] for PHP 5.x - The PHP security extension.

A hardened malloc() replacement

Hardened Memory Allocator for many Applications to increase Security. Debian packaging fork only. Fork Homepage: https://www.whonix.org/wiki/Hardened_Malloc Upstream original: https://github.com/GrapheneOS/hardened_malloc

LD_PRELOADed library to randomize malloc and friends.

Dynamic loading with privilege separation

nosh is a modern, security-focused shell designed with both usability and security in mind. It provides enhanced command-line functionality, network security features, and secure credential management.

Fully Randomized Pointers

HPone - Docker Honeypot Manager

My public notes about offensive security

Linux Kernel Runtime Guard

Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

Get a mail notification via, Canary Tokens (DNS) when a USB or SDCard device is connected a Linux computer. Also possible to de-authorize the USB device.

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability / integration over time.

🔍 Seccomp profiling and function-level tracing tool.