Defence-in-depth daemon in Go: nftables firewall + WAF + challenge + BPF LSM behavioural detection + KSPP kernel hardening

argus is a real-time NetFlow/IPFIX ingestion, enrichments, mitigation and enforcement engine. enriches data, monitors BGP, enforces rules and blackholes.

Security backports for EOL PHP version 5.6.40

ClamAV repackaged for Nixpal and CFM infrastructure — custom systemd units, /usr/local paths, and ModSecurity scan wrapper. Makefile-driven: fetch upstream RPM, overlay configs, build and publish i…

Self-hosted DynDNS + TLS reverse proxy in one static Go binary. RFC2136/TSIG updates to your own BIND, DynDNS2-compatible, ACME DNS-01 certs without ports 80/443, zero-open-ports tunneling for your…

Reusable session-based authentication and authorization for Go services

Steal SSH host private keys via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Affects every pre-31e62c2ebbfd kernel.

ZoneCloud Domain Search – WHMCS Addon Module

exim2sieve – Export cPanel/Exim email filters to Sieve scripts for universal import into Mailcow, DirectAdmin, or custom destinations.

Contact form and comment honeypot for CFM. Parses IPs, the content of contact form / comments and sends them using CFM API

Alternative to UBNT Discovery also detects Mikrotiks and other services too.

Custom ModSecurity rules for Greek Translations

A spamassassin plugin that calls clamav