Top 10 C security-tool Projects

Wazuh

151 9,108 10.0 C

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Project mention: Exclude certain CIS (sca) rules from agents | /r/Wazuh | 2023-12-11

There is currently no feature for excluding specific SCA rules however this feature has been requested here and would be added to the roadmap for future releases.

flipperzero-firmware-wPlugins

74 4,837 0.0 C

RogueMaster Flipper Zero Firmware

Project mention: Xtreme-Firmware alternatives - awesome-flipperzero, flipperzero-firmware-wPlugins, fucking-awesome-flipperzero, proxmark3-to-flipper, and flipperzero-firmware | libhunt.com/r/Xtreme-Firmware | 2024-02-12

WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
Diamorphine

1 1,654 3.0 C

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)
toxic

3 1,162 9.2 C

A Tox-based instant messaging and video chat client
OTE

4 461 7.0 C

OSINT Template Engine (by 3nock)

Project mention: Introducing OSINT Template Engine: An open source OSINT Tool. | /r/websecurityresearch | 2023-07-12

minijail

1 231 7.9 C

sandboxing and containment tool used in ChromeOS and Android

Project mention: The best WebAssembly runtime may be no runtime at all | news.ycombinator.com | 2023-12-11

https://gvisor.dev/docs/architecture_guide/platforms/ :
> gVisor requires a platform to implement interception of syscalls, basic context switching, and memory mapping functionality. Internally, gVisor uses an abstraction sensibly called Platform.
Chrome sandbox: https://chromium.googlesource.com/chromium/src/+/refs/heads/...
Firefox sandbox: https://wiki.mozilla.org/Security/Sandbox
Chromium sandbox types summary: https://github.com/chromium/chromium/blob/main/docs/linux/sa...
Minijail: https://github.com/google/minijail :
> Minijail is a sandboxing and containment tool used in ChromeOS and Android. It provides an executable that can be used to launch and sandbox other programs, and a library that can be used by code to sandbox itself.
Chrome vulnerability reward amounts: https://bughunters.google.com/about/rules/5745167867576320/c...
Systemd has SystemCallFilter= to limit processes to certain syscall:

reveng_rtkit

2 206 4.1 C

Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypass infamous rkhunter antirootkit.
InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
log4jscanwin

4 154 1.3 C

Log4j Vulnerability Scanner for Windows
modreveal

6 138 2.6 C

Utility to find hidden Linux kernel modules
harpoon

3 45 6.5 C

🔍 Trace syscalls of user-space defined functions, using eBPF (by alegrey91)

Project mention: Extract system calls from user-defined functions, using eBPF | /r/ReverseEngineering | 2023-09-29

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).