TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more

BlackHole is a modern macOS audio loopback driver that allows applications to pass audio to other applications with zero additional latency.

Small and highly portable detection tests based on MITRE's ATT&CK.

A repository for learning various heap exploitation techniques.

A command line tool that recreates the famous data decryption effect seen in the 1992 movie Sneakers.

A tool to dump the login password from the current linux user

eBPF implementation that runs on top of Windows

strace is a diagnostic, debugging and instructional userspace utility for Linux

Situational Awareness commands implemented using Beacon Object Files

Public open-source code of malware Stuxnet (aka MyRTUs).

Remote operations commands implemented using Beacon Object Files

The main libseccomp repository

IEEE 802.15.4/ZigBee Security Research Toolkit

A no-frills keylogger for macOS.

A Dwarf Fortress starter pack builder for Linux & MacOS

Linux shell written in C. Simple but functional and thoroughly commented, just for educational purposes.

Watchy code that offers a large feature set: OTA settings with backup and restore, NVS storage, Alarms, Timers, 10 WiFi Access Points, Compile AddOns, Weather support, Automatic TimeZone and NTP Sy…

tracy - a system call tracer and injector. Find us in #tracy on irc.freenode.net

Golang syscall firehose (programmatic strace/dtruss)

Skull face for Watchy

Linux kernel with ptrace-exclude patches