nova-tracer

Nova-tracer Agent Monitoring and Visibility Security monitoring and prompt injection defense for Claude Code using the NOVA Framework. Features Session Tracking - Captures all tool usage with timestamps and metadata Prompt Injection Detection - Three-tier scanning keywords, semantic ML, LLM -...

azazel

Azazel A lightweight eBPF-based runtime security tracer purpose-built for malware analysis sandboxes. Drop a sample into an isolated container, and Azazel captures every syscall, file touch, network connection, and suspicious behavior, then hands you a clean JSON stream of everything that happene...

snoop

snoop A syscall tracer for Linux, built on eBPF. Like strace but with a live TUI, smart filters, and argument decoding you can actually read. $ sudo snoop curl https://example.com 0.001 curl1234/1234 openatATFDCWD, "/etc/ssl/certs/ca-certificates.crt", ORDONLY = 4 0.002 curl1234/1234 read4,...

exif-gps-tracer

exif-gps-tracer A python script which allows you to parse GeoLocation data from your Image files stored in a dataset.It also produces output in CSV file and also in HTML Google Maps Prerequisite To run this script fluently , 1 You should have Google Maps API 2 You should enable Map JavaScript API...

kube-knark

Kube-Knark Project Trace your kubernetes runtime !! Kube-Knark is an open-source tracer that uses pcap & ebpf technology to perform runtime tracing on a deployed Kubernetes cluster. It is tracing the Kubernetes API execution and master node configuration files permission changes. The trace matchi...

Nodejs-Tracer

nodejs-tracer Simple Node.jstracer that logs calls to core modules, can spoof certain calls to defeat anti-analysis, save files written by the application and more. Useful to analyze heavily obfuscated Node.js malware. Usage node -r .\tracer.js main.js Example trace with DISPLAYSTACK active:...

strace

strace - Linux 系统调用跟踪器 这是 strace —— 一款用于 Linux 的诊断、调试和教学型用户空间工具，具有传统的命令行界面。它用于监控和篡改进程与 Linux 内核之间的交互，包括系统调用、信号传递以及进程状态的变更。strace 的运行依赖于名为 ptrace 的内核特性。 strace 依据 GNU 宽通用公共许可证 2.1 或更高版本 发布；详情请参阅 COPYING 文件。 strace 测试套件依据 GNU 通用公共许可证 2 或更高版本 发布；详情请参阅 tests/COPYING 文件。 关于近期版本的变更信息，请参阅 NEWS 文件。 文档...

strace

strace - the linux syscall tracer This is strace -- a diagnostic, debugging and instructional userspace utility with a traditional command-line interface for Linux. It is used to monitor and tamper with interactions between processes and the Linux kernel, which include system calls, signal...

IP-Tracer

IP-Tracer IP-Tracer is used to track an ip address. IP-Tracer is developed for Termux and Linux based systems. you can easily retrieve ip address information using IP-Tracer. IP-Tracer use ip-api to track ip address. How to install IP-Tracer ? apt update apt install git -y git clone...

drltrace

Drltrace Windows test build Linux test build Drltrace is a dynamic API calls tracer for Windows and Linux applications. Drltrace is built on top of DynamoRIO dynamic binary instrumentation framework. Drltrace was initialy implemented by Derek Bruening and distributed with DynamoRIO and DrMemory...

frida-stalker-NtStrace

NtStrace frida-stalker based system call tracer on windowsx64. 483NtWaitForWorkViaWorkerFactory test.exe!0x7ff91fbaf262 35NtQueryVirtualMemory test.exe!0x7ff91fbaf262 35NtQueryVirtualMemory test.exe!0x7ff91fbaf262 35NtQueryVirtualMemory test.exe!0x7ff91fbb06d2 199NtCreateThreadEx + Following thre...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: RISCV: Fixed an oops error caused by the irqsoff latency tracer. The tracehardirqson,off function requires the caller to properly set up the frame pointer. This is because these two functions use the macro ‘CALLERADDR1’ also...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronizercu when unregistering. This ensures that any RCU readers traversing the instance list have completed their operations before releasing the reference to the tracer that the instance points to...

CVE-2026-39808

CVE-2026-39808 Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint Fortinet FortiSandbox is an advanced threat protection solution that creates isolated environments to analyze suspicious files, URLs, and network traffic for malicious behavior. It uses a...

Orbit Tracer

Orbit Tracer Orbit Tracer Security Agent for Intelligent Security Remediation Automate security vulnerability analysis, risk assessment, and remediation across your entire codebase using AI and Orbit's knowledge graph The Problem Security teams face a critical challenge: Finding vulnerabilities i...

Sandroid_Dexray-Intercept

Android Binary API Tracer Sandroid - Dexray Intercept Dexray Intercept is part of the dynamic Sandbox Sandroid. Its purpose is to create runtime profiles to track the behavior of an Android application. This is done utilizing frida. Install Just install it with pip: python3 -m pip install...

KSMBD-CVE-2025-37947

CVE-2025-37947 PoC for ksmbd For more information, see the article here. Files bpf-tracer.sh - BPF msgmsg tracer CVE-2025-37947.c - exploit for CVE-2025-37947 proof-of-concept.c - minimal trigger that causes the OOB write ksmbd.conf - ksmbd config Makefile - builds exploit run-qemu.sh -...

CVE-2026-97443

A flaw was found in the Linux kernel's perf subsystem. During error handling for failed performance event allocation, the kernel unconditionally attempts to unregister a function tracer that was never successfully enabled. A local user can exploit this flaw to trigger a kernel warning, which may...

EUVD-2026-86787

In the Linux kernel, the following vulnerability has been resolved: tracing: Take tracearray reference when opening a tracer options file When a tracer option file is opened, it is passed a descriptor that points to an element on the tracearray's topts array. This element has information to find...

CVE-2026-97933: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tracing: Take tracearray reference when opening a tracer options file When a tracer option file is opened, it is passed a descriptor that points to an element on the tracearray's topts array. This element has information to find...