google / nsjail

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

eunomia-bpf / bpftime

Userspace eBPF runtime for Observability, Network, GPU & General Extensions Framework

shaheeryasirofficial / project-scorpio

A Windows process injection loader combining PPID spoofing, manual DLL mapping, module stomping, and direct NT syscall