Real-time performance forensics with eBPF. Correlates CPU usage, scheduler contention and page-fault pressure to detect noisy neighbors & OOM risks.

An open-source cross-platform alternative to AirDrop

xdperf is a high-performance network traffic generation tool that leverages XDP (eXpress Data Path).

JA3 implementation in C that works with eBPF/XDP

Tcell is an alternate terminal package, similar in some ways to termbox, but better in others.

SURF - Advanced Go HTTP client with Chrome/Firefox browser impersonation, HTTP/3 with QUIC fingerprinting, JA3/JA4 TLS emulation, and anti-bot bypass for web automation and scraping.

This eBPF module will drop any IPv4 packets that have the RFC 3514 "evil bit" set.

Build Real-Time Knowledge Graphs for AI Agents

Server-Sent Events client in Go

Plan 9 from Bell Labs (9legacy, bootable)

Declarative hardware configuration for NixOS [maintainer=@brianmcgee,@Mic92]

NeoVim lua plugin that annotates source code with profiling information from perf, LuaJIT, or other profilers.

A small Neovim plugin for previewing definitions using floating windows.

Collection of DOs and DON'Ts for modern Neovim Lua plugin development

Runtime sandboxing for Nix

Programmable adapter for USB input devices

ImRAD is a GUI builder for the ImGui library

A pastebin supercharged for git collaboration

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

Coroot is an open-source observability and APM tool with AI-powered Root Cause Analysis. It combines metrics, logs, traces, continuous profiling, and SLO-based alerting with predefined dashboards a…

Lightweight Durable TypeScript Workflows

A library for calling C functions from Go without Cgo

BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more

TPM2 samples with go-tpm and tpm2_tools

Scaffolding for BPF application development with libbpf and BPF CO-RE

bpftop provides a dynamic real-time view of running eBPF programs. It displays the average runtime, events per second, and estimated total CPU % for each program.

A Terminal UI for browsing security vulnerabilities (CVEs)

golang crypto.Signer for Trusted Platform Module (TPM)

Desbordante is a high-performance data profiler that is capable of discovering many different patterns in data using various algorithms. It also allows to run data cleaning scenarios using these al…

libxev is a cross-platform, high-performance event loop that provides abstractions for non-blocking IO, timers, events, and more and works on Linux (io_uring or epoll), macOS (kqueue), and Wasm + W…