nspin

nix-security

Nix/NixOS security tool collections

rust-sel4

Rust support for seL4 userspace

kani

Kani Rust Verifier

NeptuneOS

Neptune OS: A Windows NT personality for the seL4 microkernel

verus

Verified Rust for low-level systems code

picoserve

An async no_std HTTP server suitable for bare-metal environments, heavily inspired by axum

bitwuzla

Bitwuzla is a Satisfiability Modulo Theories (SMT) solver for the theories of fixed-size bit-vectors, floating-point arithmetic, arrays and uninterpreted functions and their combinations. Its name is derived from an Austrian dialect expression that can be translated as “someone who tinkers with bits”.

cntr

A container debugging tool based on FUSE

embedded-fatfs

magic-nix-cache

Save 30-50%+ of CI time without any effort or cost. Use Magic Nix Cache, a totally free and zero-configuration binary cache for Nix on GitHub Actions.

coru

Pocket coroutine library

sccache

Sccache is a ccache-like tool. It is used as a compiler wrapper and avoids compilation when possible. Sccache has the capability to utilize caching in remote storage environments, including various cloud storage options, or alternatively, in local storage.

unwinding

Stack unwinding library in Rust

heads

A minimal Linux that runs as a coreboot or LinuxBoot ROM payload to provide a secure, flexible boot environment for laptops, workstations and servers.

microkit

Microkit - A simple operating system framework for the seL4 microkernel

samytools

Simple tools to make reverse engineering and console cowboying easier, primarily by data translation and manipulation + file handle piping. Mostly *nix tools with an emphasis on macOS.

armour

Armour provides a custom policy language and a distributed enforcement infrastructure to secure applications developed using micro-services

avatar2

Python core of avatar²

sgx

Library for Intel SGX

veracruz

Main repository for the Veracruz privacy-preserving compute project, an adopted project of the Confidential Compute Consortium (CCC).

1vyrain

LiveUSB Bootable exploit chain to unlock all features of xx30 ThinkPad machines. WiFi Whitelist, Advanced Menu, Overclocking.

crucible

Crucible is a library for symbolic simulation of imperative programs

qemu-shoggoth

QEMU enhanced with OS handlers, external plugins, and rapid analysis execution engine.

osxfuse

FUSE extends macOS by adding support for user space file systems

transientfail

Website and PoC collection for transient execution attacks

cantordust

Public repository for Cantordust Ghidra plugin.

HOL

Canonical sources for HOL4 theorem-proving system. Branch develop is where “mainline development” occurs; when develop passes our regression tests, master is merged forward to catch up.

rust-embedded-experiments

Small experiments in Rust for embedded projects

wg-allocators

Home of the Allocators working group: Paving a path for a standard set of allocator traits to be used in collections!

wasmtime

A fast and secure runtime for WebAssembly