Runtime enforcement of software supply chain capabilities in Go

Rancher RBAC Wizard is an intuitive UI tool for visualizing Rancher Kubernetes RBAC resources.

LCOV

io_uring based rootkit

A port of Brendan Gregg's eBPF profile.py application to Golang.

Rofi: A window switcher, application launcher and dmenu replacement

A simple, fast and user-friendly alternative to 'find'

UTrace is a tracing utility that leverages eBPF to trace both user space and kernel space functions

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

🦀 Small exercises to get you used to reading and writing Rust code!

Detects when some calls can be replaced by methods from the testing package

basic linux container implementation in C

Code to accompany the "Namespaces in Go" series of articles.

print tar headers as json

Install #Kolide on exotic Linux distributions (Bluefin, Wolfi, arm64)

#supply #chain #attack #detection

A place for the InfoSec community to share and celebrate real stories of organizations successfully using SBOMs (and other bills of material) to actually manage and reduce security risk in meaningf…

File Access Policy Daemon

Playing around with a tool for updating POM dependencies

ebpf compiler in Go; Write Go, get ebpf

ABRoot is a utility that provides full immutability and atomicity to a Linux system, by transacting between two root filesystems. Updates are performed using OCI images, to ensure that the system i…

Capsule User-Documentation

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernet…

Kubernetes-native security toolkit

Automated CIS Benchmark Compliance Remediation for Kubernetes 1.6.1 with Ansible

Low-overhead sampling profiler and tracer for Ruby for Linux

A book-in-progress about the Linux kernel and its insides.

An sh (and bash) linter to improve maintainability of code

eBPF based always-on CPU/GPU profiler auto-discovering targets in Kubernetes and systemd, zero code changes or restarts needed!

Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.