Pinned Loading

1. hARMless hARMless Public

   An ARM64 Linux ELF Packer/Loader

   C 26 9

2. EDRHookDetector EDRHookDetector Public

   A tool to detect in-memory EDR hooks on ARM64 Linux by comparing in-memory libc function bytes with the clean on-disk bytes and applying ARM64-specific heuristics.

   C 3

3. io_uring_monitor io_uring_monitor Public

   The io_uring Security Monitor is an advanced eBPF-based detection system designed to identify and alert on potential abuse of the Linux io_uring subsystem for defense evasion

   C 1

4. LLM-Fingerprinter LLM-Fingerprinter Public

   LLM fingerprinting system that identifies the underlying LLM model family

   Python 2 1

5. BeaconDetectionSystem BeaconDetectionSystem Public

   Decentralized C2 beaconing detection framework for edge router deployment, featuring integration with SIEM and alerting system.

   Python 1

6. living-off-the-reboots living-off-the-reboots Public

   A comprehensive red team reference covering 81 persistence techniques across Linux and Windows and detection engineering guidance for each technique.