linux-security

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

OpenSnitch is a GNU/Linux application firewall

Anonymous MAC address rotation tool for pentesting & OPSEC

Linux Security Audit Tool

SunnyDayBPF: eBPF-based post-syscall user-buffer telemetry deception research by Azizcan Daştan

A closed-loop security runtime preventing "The Great Exfiltration" and Indirect Prompt Injection in Autonomous AI Agents.

Sniff-NG — Python TUI tool for network scanning, ARP spoofing, and MITM attacks on local networks. Fast, user-friendly, with auto dependency install. For educational and penetration testing use only.

🔍 A CLI tool for security analysis of Arch AUR PKGBUILDs

Vulnerability management tool that provides Buildroot SBOM generation and CVE Analysis of target images.

Linux Auditing System logs pretty printer

Vulnerability management tool that provides OpenWRT SBOM generation and CVE Analysis of target images.

Linux last-logon forensic auditing from the binary lastlog database.

Iris is an open-source facial authentication system for Linux, designed for Ubuntu, GNOME, and Wayland. It uses infrared recognition with PAM integration for GDM login, screen unlock, sudo, and PolKit prompts. Iris offers an animated interface, encrypted templates, configurable settings, and password fallback. Facial images stay on your device.

Simple and reliable front-end for nftables.

Enhance Linux security with this Python framework! Audit & remediate against CIS, NIST, DISA STIG, NSA, CISA, ENISA, ISO 27001, & Core baselines (1,100+ checks). Multi-distro support (Debian/Ubuntu/RHEL/Fedora/SUSE/Arch), interactive/automated fixes, reports (HTML/JSON/CSV/XML).

Runtime integrity guard: detect and block Linux page cache tampering (Copy Fail, Dirty Pipe, Dirty Frag) via O_DIRECT + fanotify. Includes 7 host-side exploitation PoCs.

Linux File Integrity Checker

A Cybersecurity tool to detect and block IPs conducting port scans on a host machine.

Linux VPS Defense via Computer Vision: Time-series to Spectrogram CNN + Isolation Forest ensemble. High-performance inference via ONNX.

LIDS — Linux Intrusion Detection System. A lightweight security monitoring agent for Linux systems that detects attacks, suspicious activity, and sends real-time alerts via Telegram.