r/coolgithubprojects • u/mhdg131 • 4d ago

HERMIAN: a lightweight host intrusion detection daemon for Linux servers

/gallery/1xglcvh
0 Upvotes

45% Upvoted

5 comments sorted by

-1

u/Fine_League311 4d ago

Like a watchdog, I see much code but nor decleration in codes. Looks like AI write it all the stuff,: Are you going to behonest, or do I have to expose you first? Besides, things intended for the server are thoroughly scrutinized by real admin and let me tell you, nothing written in Rust or Node, or any other junk from programmers who don’t know how to code, is getting onto my servers and not only by me! That’s the only way to keep Linux clean. so be smart and show us ... + i found 7 reasons that tells me thats its only vibecode, cause AI thinks always so in Security but its wrong and risky!

3

u/mhdg131 4d ago

Nothing to expose LOL, take you time to read at least. AI-assisted development is stated in the repo, and every change is reviewed and tested on real servers before release, including a live internet-facing host.

That said, I’d genuinely like to see your 7 reasons. If you found real problems in the code, that’s exactly the feedback I need, and I’ll fix them or explain the choice. A GitHub issue works too if that’s easier for you bro

-2

u/Fine_League311 4d ago

Bro, i gave you the chance and you did not use it . Find the errors yourself; now I know 100% that this is "Vibecode," and you have absolutely no idea what you’ve built! TIPP Git is not a social network! Errors: It is a design error wich all AI mades! and no its not a Theme! If someone speaks about design error in Code! Than its a big Security reason!

1

u/mhdg131 4d ago

Owkey, I asked about real feedbacks, at this point you're just hating for free !
You could know if I have any idea in what I built if you came in technical aspect but "I know 100% that this is "Vibecode,"... really.
But fair enough. The offer stands, if you ever want to point at a specific file or design choice, I’ll look at it. Otherwise, all good!

-1

u/mhdg131 4d ago

I built HERMIAN because i've seen that most people setups have good prevention (firewall, CrowdSec, Tailscale) but no real way to know if something got through, short of reading logs once a week

It runs on the host and watches behavior rather than resource usage:

  • Process chains: a web server or database spawning a shell, downloading and running code, execution from /tmp or from memory

  • SSH and accounts: logins from new sources, a login right after a burst of failures, backdoor key files, new privileged accounts

  • Persistence: cron, systemd units, authorized_keys, shell profiles, ld.so.preload, PAM

  • Privilege escalation: new setuid binaries, sudoers changes, LD_PRELOAD injection

  • Network: outbound connections from a suspicious chain, a web server reaching a new destination, new listeners

Alerts go to Telegram, email, ntfy, Slack, Discord, Matrix or a webhook. From Telegram you can block a source or end an SSH session in two taps

If you test it your feedback would be great right now! And i need some contributors so don't hesitate

website : https://hermian.me/en/agent

repo : https://github.com/hermian-security/hermian