Ghost
Detect process injection and memory tampering in Rust
What it does
Built Ghost - scans processes for signs of malware injection. Catches shellcode, API hooks, process hollowing, thread hijacking, that stuff. Works on Windows, Linux, macOS. Pretty fast, scans 200 processes in about 5 seconds. Has both command line and terminal UI. Fair warning - you'll get false positives from browsers and game anti-cheat because they do weird memory stuff. So don't freak out if it flags Chrome. Open source, MIT license. Drop a star if you find it useful.
Does a similar job
all alternatives →- IWI wrote a tool in Rust for tracking all allocations in a Linux process2023 · github.com · ▲113
- MSMCP-Shield – Detect security issues in MCP servers2025 · github.com · ▲134
I noticed the growing security concerns around MCP (https://news.ycombinator.com/item?id=43600192) and built an open source tool that can detect several patterns of tool poisoning attacks, exfiltration channels and cross-origin manipulations. MCP-Shield scans your installed servers (Cursor, Claude Desktop, etc.) and shows what each tool is trying to do at the instruction level, beyond just the API surface. It catches hidden instructions that try to read sensitive files, shadow other tools' behavior, or exfiltrate data. Example of what it detects: - Hidden instructions…
- RARun – a CLI universal code runner I built while learning RustOct 2025 · github.com · ▲96
Hi HN — I’m learning Rust and decided to build a universal CLI for running code in many languages. The tool, Run, aims to be a single, minimal dependency utility for: running one-off snippets (from CLI flags), running files, reading and executing piped stdin, and providing language-specific REPLs that you can switch between interactively. I designed it to support both interpreted languages (Python, JS, Ruby, etc.) and compiled languages (Rust, Go, C/C++). It detects languages from flags or file extensions, can compile temporary files for compiled languages, and exposes a unified REPL…
- RARustNet, a network monitoring TUI with process identificationSep 2025 · github.com · ▲5
Hi HN! I built RustNet, a Terminal UI based network monitor written in Rust that shows real-time connections with process identification and protocol detection. What may make it interesting: • Deep packet inspection for HTTP, HTTPS/TLS (with SNI), DNS, and QUIC protocol detection • Process identification using eBPF on Linux (experimental) and PKTAP on macOS which does also catch short-lived processes that polling procfs or lsof would miss • Multi-threaded packet processing with lock-free data structures for the UI • Cross-platform (Linux, macOS, Windows but process identification so far…
More dev tools this month
the category →
OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 2d ago · opentrailpaper.com
Open-source GTM skills for technical founders
Dev tools · 30d ago · gtmcofounder.com
Launched alongside, November 2025
the whole month →
- IB
Life & fun · Nov 2025 · bitsnpieces.dev
- BBoing▲782
Life & fun · Nov 2025 · boing.greg.technology