Awesome GitHub RepositoriesKernel Task Inspection

pwndbg is a GDB plugin and binary analysis framework designed for reverse engineering, exploit development, and low-level program analysis. It extends the core functionality of the debugger to provide advanced memory inspection and automation tools. The project distinguishes itself with specialized capabilities for heap analysis across glibc, jemalloc, and musl, as well as a comprehensive kernel debugging toolkit for inspecting Linux kernel tasks and slab allocators. It includes an integrated ROP gadget searcher for constructing exploit chains and an LLM-powered debugging assistant that provi

Falco is an eBPF runtime security monitor and cloud native detection engine that identifies abnormal behavior and security threats across hosts and containers. It functions as a Linux kernel event auditor, capturing system calls and kernel events in real-time to detect malicious activity. The system distinguishes itself through a rule-based threat detection model that evaluates system activity against a library of community-maintained rules and custom security definitions. It enriches raw kernel events with container and Kubernetes metadata to provide observability into isolated environments

This project provides Rust bindings for the TensorFlow C API, serving as a tensor computation interface and machine learning library. It enables the construction and execution of machine learning models and neural networks by bridging a systems language to high-performance backends. The framework supports GPU-accelerated computing to increase the speed of model training and inference by offloading mathematical operations to graphics processing units. It offers both graph-based computation for defining static network architectures and an eager execution mode for immediate operation calls durin

Battery Historian es una herramienta de visualización y perfilado para analizar el consumo de energía y el drenaje de batería en dispositivos Android. Funciona como un visor de informes de errores (bugreport) y perfilador de consumo de energía que analiza los registros del sistema para extraer estadísticas de batería y datos del kernel en una interfaz basada en web. La herramienta se especializa en correlacionar fuentes de datos dispares en una línea de tiempo cronológica sincronizada. Identifica actividades que consumen energía mediante el seguimiento de transiciones de wakelock de espacio de usuario y kernel, mapeando fuentes de activación del kernel a marcas de tiempo en tiempo real y superponiendo registros de monitores de energía de hardware externos sobre eventos del sistema. El sistema proporciona capacidades para el análisis comparativo, permitiendo el cálculo de deltas entre múltiples informes de errores para medir cambios en el comportamiento energético. Además, agrega métricas a nivel de aplicación y eventos del sistema para identificar disparadores de software específicos que impiden que un dispositivo entre en modo de suspensión.

HyperDbg is a hardware-assisted kernel-mode debugging platform that leverages virtualization to monitor and control system execution. By utilizing hypervisor-level primitives, it enables deep system analysis and instrumentation without relying on standard operating system debugging interfaces. The framework provides a comprehensive environment for inspecting both kernel and user-mode processes, allowing for granular control over execution flow and system state. The project distinguishes itself through a transparent debugging layer designed to remain invisible to the target environment. It emp

pwru is a tooling implementation for tracing, filtering, and debugging network packet movements and transformations within the Linux kernel. It functions as an eBPF network packet tracer and debugger used to analyze kernel state and identify where network packets are dropped or redirected. The project provides specialized capabilities for monitoring the packet lifecycle, including tracking packets through NAT transformations and tunnel decapsulation. It includes an eBPF traffic filter that reduces noise by restricting traced packets based on namespaces, interfaces, and kernel function names.