Kernel

KubeArmor is a Kubernetes-native runtime security enforcement system that restricts pod and container behavior (process execution, file access,...

KernelSU Next is a kernel-based root access solution for Android that provides su command functionality and privilege management at the kernel level,...

awesome-game-security is a curated collection of resources, tools, and research on game security topics including anti-cheat systems, reverse...

CachyOS Linux Kernels is a specialized kernel distribution for Arch Linux that provides multiple CPU scheduler options (BORE, EEVDF, BMQ) and...

ReactOS is an open-source operating system designed for compatibility with the Windows NT family (NT4, 2000, XP, 2003, Vista, 7), allowing Windows...

gVisor is an application kernel written in Go that provides strong isolation between containerized applications and the host OS, implementing a...

Lucebox is a specialized LLM inference server optimized for consumer NVIDIA and AMD GPUs, using custom CUDA/HIP kernels and speculative decoding...

Tetragon is an eBPF-based security observability and runtime enforcement platform that monitors kernel-level events (process execution, system calls,...

KernelSU is a kernel-based root access solution for Android devices that replaces traditional user-space root tools by operating at the kernel level....

SerenityOS is a complete, self-contained graphical Unix-like operating system for 64-bit x86, ARM, and RISC-V architectures, featuring a custom...

APatch is a kernel-based root solution for Android devices that enables system patching through kernel-level hooks and module support similar to...

Asterinas is a memory-safe, high-performance Linux alternative written in Rust, designed as a production-grade kernel with a small trusted computing...

An educational tutorial series teaching bare-metal OS development in Rust, covering kernel fundamentals from freestanding binaries through...

Nidhogg is a Windows kernel rootkit for x64 systems that demonstrates 25+ rootkit techniques including process hiding, privilege escalation, memory...

stress-ng is a comprehensive stress-testing tool that exercises computer hardware and OS kernel interfaces through 380+ selectable tests covering...

WinFsp is a platform for building custom file systems on Windows without kernel programming knowledge, analogous to FUSE for Linux. It consists of a...

EfiGuard is a UEFI bootkit for x64 Windows that patches the boot process to disable PatchGuard and Driver Signature Enforcement at startup,...

Maestro is a lightweight Unix-like kernel written in Rust, targeting x86_64 and x86 architectures with planned AArch64 support. It is designed for...

Hermit is a lightweight unikernel written in Rust designed for cloud computing and high-performance computing workloads. It targets developers...

u-root is a Go-based userland toolkit for building minimal Linux initramfs images and bootloaders, used primarily for embedded systems, firmware...

cuTile Python is a programming model for writing parallel GPU kernels for NVIDIA GPUs using Python, with a focus on tile-based computation patterns....

Cilium is a production-grade networking, security, and observability platform built on eBPF that replaces traditional kernel networking stacks in...

syzkaller is an unsupervised coverage-guided kernel fuzzer developed by Google that automatically detects bugs in operating system kernels across...

RT-Thread is a production-grade real-time operating system (RTOS) written in C, designed for IoT and embedded systems from resource-constrained...

SkiftOS is an open-source operating system built from scratch emphasizing modularity, simplicity, and modern design, currently in early development...

Armbian Build is the official build framework for creating custom Linux distributions (based on Debian/Ubuntu) for single-board computers and...

ToaruOS is a complete, from-scratch operating system for x86-64 and ARMv8 architectures, including kernel, C library, window compositor, and...

Tock is a secure embedded operating system for microcontrollers (Cortex-M and RISC-V) that runs multiple concurrent applications in isolation using...

Oryx is a terminal UI for real-time network traffic inspection and analysis using eBPF on Linux, offering packet sniffing, traffic statistics,...

This project provides detailed documentation and guidance for binary-based high-availability installation of Kubernetes, primarily targeting CentOS...