Open PS5 firmware 14.10 research: Lua userland experiments, syscall and attack-surface analysis. Kernel read/write and a complete exploit are not demonstrated.
Clean Indirect Syscalls with Syscall Tampering.
Linux Test Project (mailing list: https://lists.linux.it/listinfo/ltp)
Patching and hooking the Linux kernel with only a stripped Linux kernel image.
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
chroot, mount --bind, and binfmt_misc without privilege/setup for Linux
Stealthy Linux Kernel Rootkit
Userspace eBPF runtime for Observability, Network, GPU & General Extensions Framework
Mirror of https://gitlab.redox-os.org/redox-os/kernel
An ergonomic and safe syscall interception framework for Linux.
A browser-native operating system. Unix/Linux reimagined where the browser IS the kernel and Web APIs ARE syscalls. 60+ commands, bash-like shell, virtual filesystem, and IndexedDB persistence.
Userspace macOS translation layer for Linux ARM64
Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscation. Run commands, reverse shells or add users
An embedded project using leaked Windows XP OS kernel + Linux userland (Syscall shim + Musl + Busybox + Xfce desktop)
Cross-platform syscall-powered implant & C2 β direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.
A Windows process injection loader combining PPID spoofing, manual DLL mapping, module stomping, and direct NT syscall