exploit-mitigation

Complete System Hardening Suite 2026 🛡️ Advanced Antivirus & Network Security

SELinux, IdM, and AAP proof of concept for confining privileged automation and denying kernel exploit surfaces before jobs reach managed RHEL hosts.

Open untrusted documents in a sandbox. PDFs, images, Office files — only pixels reach your machine.

Go daemon for Linux that reads audit events from the audisp-af_unix Unix domain socket and automatically deletes or quarantines (moves) files that match a set of configurable rules as soon as they appear

Solução avançada de segurança para Minecraft 1.8.9. Atua na camada Netty interceptando pacotes brutos para mitigar ataques de Bot (DoS), exploits de NBT e Book Crash. Focado em performance e baixo nível, filtra dados antes da main thread para garantir estabilidade e proteção total contra pacotes maliciosos.

Get Bitdefender Total Security Ultimate on GitHub: a complete, high-performance toolkit for seamless malware defense and professional protection. #Antivirus

Runtime ROP/JOP detector using Intel LBR via perf_event_open

Hands-on labs and in-depth guides for Linux kernel security hardening and mitigations

Scans ELF binaries for the exploit mitigations they were actually compiled with (PIE, NX, canary, RELRO). JSON output and a --fail-under gate for CI.

A 2026 cross-platform security suite designed to protect Windows, macOS, iOS, and Android devices. It features multi-layered ransomware defense, a two-way firewall to monitor network traffic, and real-time threat detection. The utility includes a VPN for private browsing and parental controls to manage digital safety for family members.

An advanced, zero-dependency C++17 Threat Vector Deflector for monitoring execution pipelines and actively isolating zero-day exploit payloads via real-time geometric memory mapping.

ELF hardening scanner in Rust (goblin), parallel directory walk and --strict gate. Third implementation of the same scanner.

ELF hardening scanner in Go (debug/elf). Cross-checked against the Python and Rust implementations.

divcc: compiler wrapper producing per-device unique binaries via seeded link-order shuffling, so an exploit built on fixed addresses does not carry across a fleet.