nam-jaehyun

bane

Custom & better AppArmor profile generator for Docker containers.

bouheki

bouheki is KRSI(eBPF+LSM) based Linux security auditing tool.

bpfbox

🐝 BPFBox 📦 Exploring process confinement in eBPF

bpfcontain-rs

BPFContain is a container security daemon for GNU/Linux leveraging the power and safety of eBPF and Rust.

confine

This tool set can generate SECCOMP profiles for Docker images. It mainly relies on static analysis, making its results more reliable than currently available tools.

discovery-engine

Discovery Engine: Auto generate policies for KubeArmor, Cilium.

eBPF-IDS

NIDS, eBPF

ecapture

capture SSL/TLS text content without CA cert by eBPF.

KubeArmor

Cloud-native Runtime Security Enforcement System

kubearmor-client

KubeArmor Client

kubearmor-relay-server

KubeArmor Relay Server

LiCShield

lsmtrace

Trace deep kernel events through eBPF and lsm hooks

nam-jaehyun.github.io

slack-invite-automation

A tiny web application to invite a user into your slack team.

SPEAKER

SPEAKER is a system call reduction system to automatically reduce the attack surface of Linux application containers.

syscall2seccomp

Build custom Docker seccomp profiles for containers by finding syscalls it uses.

tetragon

eBPF-based Security Observability and Runtime Enforcement

uftrace

Function graph tracer for C/C++/Rust

TripleCross

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.