Patching and hooking the Linux kernel with only a stripped Linux kernel image.
-
Updated
Sep 1, 2026 - C
#
kernel-security
Here are 72 public repositories matching this topic...
KASLD defeats Linux kernel KASLR from a local process — recovering the virtual and physical memory layout where a leak or side channel allows, and narrowing it to the smallest set of placements the evidence supports otherwise.
linux security kernel linux-kernel pentesting kernel-exploitation aslr ctf-tools side-channel-attacks exploit-development kernel-exploit aslr-bypass kaslr linux-kaslr kernel-security kaslr-bypass microarchitectural-attacks linux-aslr kernel-aslr
-
Updated
Sep 19, 2026 - C
Utility to find hidden Linux kernel modules
-
Updated
May 2, 2026 - C
Linux & Android Kernel Vulnerability research and exploitation
linux pwn exploitation kernel-exploitation privilege-escalation lpe linux-kernel-hacking kernel-bypass vulnerability-research privilege-escalation-exploits kernel-security
-
Updated
Dec 12, 2023
-
Updated
Apr 10, 2023 - Python
Minimal no-libc Linux x86_64 ELF PoC build for Copy Fail (CVE-2026-31431)
x86-64 splice linux-kernel poc elf af-alg linux-security security-research vulnerability-research kernel-security no-libc cve-2026-31431 copy-fail tiny-elf algif-aead
-
Updated
May 3, 2026 - Shell
Educational Linux kernel rootkit PoC exploring DKOM, syscall hooking, stealth, observability and defensive detection
linux kernel rootkit linux-kernel cybersecurity educational malware-research ebpf dkom offensive-security security-research detection-engineering kernel-security
-
Updated
Aug 9, 2026 - C
Advanced kernel-native security framework to disrupt and prevent DNS-based breaches including C2 channels and tunneling with zero data loss. Combines TC, Netfilter, raw socket interception, BPF maps, and ring buffers, runs entirely on eBPF in the Linux kernel. Integrates with deep learning for advanced intelligent EDR
golang crypto tensorflow linux-kernel apache-kafka ebpf seccomp xdp qos conntrack traffic-control kernel-keyring linux-kernel-net lsm data-loss-prevention tracepoint cilium-ebpf dns-security kernel-security kernel-datapath
-
Updated
Jul 6, 2026 - Go
Curated Linux LPE corpus — 28 modules from 2016 to 2026, with detection rules. One command, safest-first root: skeletonkey --auto --i-know
pentesting auditd cve sigma privilege-escalation blueteam linux-security detection-rules redteam exploit-development kernel-security
-
Updated
Aug 31, 2026 - C
Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opportunities.
reverse-engineering antivirus kernel-mode ring0 kernel-exploitation ioctl edr av-bypass windows-internals windows-security edr-evasion threatresearch byovd windows-exploit kernel-security process-termination vulnerable-driver av-killer edr-killer driver-security
-
Updated
Sep 15, 2026 - Rust
Offensive & defensive Linux kernel security research focused on rootkit behavior, observable artifacts and detection.
research kernel-module rootkit linux-kernel cybersecurity malware-research ebpf dkom offensive-security defense security-research defensive-security detection-engineering kernel-security
-
Updated
Aug 9, 2026 - C
Project Chronos — eBPF/XDP covert timing-channel PoC for security research. Demonstrates kernel-level passive monitoring, IAT modulation, process masquerading & anti-forensics techniques. Built for Blue Team detection R&D.
proof-of-concept linux-kernel cybersecurity ebpf xdp covert-channel network-security anti-forensics security-research blue-team threat-detection edr-evasion kernel-security process-masquerading timing-channel
-
Updated
Apr 29, 2026 - C
Open-source hypervisor-based endpoint security. Ring -1 monitoring for Intel VT-x and AMD-V. Rootkit detection, DKOM, MSR guard, stealth EPT hooks.
security c99 virtualization linux-kernel hypervisor cybersecurity bare-metal systems-programming vt-x malware-detection anti-rootkit edr ept blue-pill endpoint-security amd-v kernel-security rootkit-detection ring-minus-one memory-introspection
-
Updated
Apr 18, 2026 - C
Look for possible escape vectors from a container
linux docker kubernetes aws azure linux-kernel cicd cve-scanning devsecops container-security kernel-hardening kubernetes-security kernel-security
-
Updated
Sep 6, 2026 - Shell
Windows 10/11 x64 Kernel Analysis & Anti-Rootkit Toolkit
rootkit reverse-engineering windows-kernel malware-analysis windows-driver anti-rootkit security-research kernel-security rootkit-detection
-
Updated
Sep 12, 2026 - C
Hawkeye Community — official open-source edition of Hawkeye Lab. Windows kernel security research console. Download releases here.
-
Updated
Sep 9, 2026 - C++
DMA Lab - Hardware-level anti-cheat research, firmware configs, FPGA guides and PCILeech resources
fpga hardware reverse-engineering game-hacking anti-cheat dma memory-forensics memprocfs pcileech kernel-security leechcore
-
Updated
May 8, 2026 - Python
An educational Secure Boot and Kernel Integrity Verification system demonstrating chain of trust, kernel signing, and protection against boot-level attacks using SHA-256 and RSA-2048.
security kernel attack command-line linux-kernel cybersecurity kali-linux rsa-cryptography boot-loader security-tools uefi-boot bios-settings uefi-secureboot verification-code rsa-2048 kali-linux-tools varification verification-system kernel-security sha-256-hash
-
Updated
Dec 12, 2025 - C
A read-only Linux analyzer that maps kernel attack surface to the workloads using it and generates evidence-backed, reversible hardening plans.
-
Updated
Sep 19, 2026 - TypeScript
A high-performance eBPF and C++20 kernel security engine for sub-microsecond process monitoring and execve execution blocking.
linux-kernel ring-buffer ebpf system-programming security-tools process-monitoring cpp20 libbpf tracepoint kernel-security
-
Updated
Sep 1, 2026 - C++
Add this topic to your repo
To associate your repository with the kernel-security topic, visit your repo's landing page and select "manage topics."