Kernel-based Process Monitoring on Linux Endpoints for File System, TCP and UDP Networking Events and optionally DNS, HTTP and SYSLOG Application Messages via eBPF Subsystem

Virtualization detection through speculative execution PoCs and papers

Working Set Page Cache side-channel IPC PoC

A Next Generation Honeypot for a 2016 Oregon State Senior Project

Pedagogical Hypervisor, based on MIT JOS

A C/C++ library to parse Windows portable executables written with speed and stability in mind.

Tetris for x86 in bad C. Succeeded by Tetrasm.

A Simple Heap Profiler for Windows C/C++ Applications

Mirror of the Xen MiniOS Git from git://xenbits.xen.org/mini-os.git

Linux Runtime Process Injection Tool

BPFContain is a container security daemon for GNU/Linux leveraging the power and safety of eBPF and Rust.

Xen-based unikernel in Rust

Intel Kernel Guard Technology Core Repo

PoC LibVMI-based GDB server for virtual machines

QTrace, a "zero knowledge" system call tracer

Software for monitoring users' file access

Windows driver for profiling and debugging ring 3 applications

A simulator for a simple RISC CPU in C

PathArmor context-sensitive CFI implementation

For F@%k's sake - it's a MODULE!

Anti-AV compilation

This repository contains the sources and documentation for the SWAPGS attack PoC (CVE-2019-1125)

Example program using eBPF to log data being based in using shell pipes

The CloudProxy Tao for Trustworthy Computing

A sample project for using Capstone from a driver in Visual Studio 2015