Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability / integration over time.

Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

Linux Kernel Runtime Guard

SUHOSIN [수호신] for PHP 5.x - The PHP security extension.

HardenedBSD implements strong exploit mitigations and security hardening technologies on top of FreeBSD, with a direct focus on the nexus between human rights and information security. HardenedBSD is the first (and only) enterprise operating system to have every part of its public infrastructure accessible by human-rights focused technologies li…

My public notes about offensive security

Suhosin Extension for PHP 7.x

🔍 Seccomp profiling and function-level tracing tool.

Openwall GNU/*/Linux (Owl) is a small security-enhanced Linux distribution for servers. Owl has reached its end-of-life, but its legacy lives on in a few other distributions (most notably, ALT Linux) and upstream projects. This is an export of the Owl CVS repository into Git.

Hardened Memory Allocator for many Applications to increase Security. Debian packaging fork only. Fork Homepage: https://www.whonix.org/wiki/Hardened_Malloc Upstream original: https://github.com/GrapheneOS/hardened_malloc

Linux process enumeration tool for hardened environments

A hardened malloc() replacement

Dynamic loading with privilege separation

Fully Randomized Pointers

S.A.R.A. development branch. Rebased often. Use at your own risk.

LD_PRELOADed library to randomize malloc and friends.

Lightweight, secure and login like console display manager for X

(Automatic Docker Hub build of) SSH tarpit that slowly sends an endless banner

Get a mail notification via, Canary Tokens (DNS) when a USB or SDCard device is connected a Linux computer. Also possible to de-authorize the USB device.

HPone - Docker Honeypot Manager