A collection of bypasses and exploits for eBPF-based cloud security.
☆32Jan 12, 2024Updated 2 years ago
Alternatives and similar repositories for ebpf-attacks
Users that are interested in ebpf-attacks are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Run ebpf programs in docker (e.g., bpftrace)☆29Oct 6, 2022Updated 3 years ago
- A Linux kernel module which can be used to allocate memory from the Contiguous Memory Allocator☆16Oct 31, 2017Updated 8 years ago
- Exploit for CVE-2021-25741 vulnerability☆30Jan 19, 2022Updated 4 years ago
- Project Vault Range PoC: Know your enemy and yourself to build better defense-in-depth solution!☆47Apr 5, 2025Updated last year
- Hide your tcp connection！！！☆11Apr 8, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Be careful.☆55Sep 7, 2026Updated 2 weeks ago
- Dockerfile and Kubernetes manifests for reproduce CVE-2024-3094☆14Apr 6, 2024Updated 2 years ago
- proof-of-concept example of using eBPF to Monitor for eBPF Map tampering☆24May 5, 2021Updated 5 years ago
- A simple example of map_in_map usage in libbpf☆10Mar 18, 2020Updated 6 years ago
- Ghidra analyzer for UEFI firmware.☆18Jun 29, 2026Updated 2 months ago
- AyedFuzzer is a small File-Format-Fuzzer with 3 options (File-mutating, WinDbg-interactive monitor, multi-processing) for windows executa…☆17Dec 2, 2024Updated last year
- Kernel-level execution records for GitHub Actions☆17Sep 16, 2026Updated last week
- Detect and bypass Istio sidecar☆21Sep 24, 2021Updated 4 years ago
- ☆115Mar 29, 2026Updated 5 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- UTrace is a tracing utility that leverages eBPF to trace both user space and kernel space functions☆52Jan 18, 2022Updated 4 years ago
- KernelGhost is a next-generation offensive security framework that combines stealthy eBPF-based rootkit capabilities with advanced hyperv…☆32Apr 2, 2025Updated last year
- Github Actions wrapper for vmtest☆12Jan 10, 2025Updated last year
- bpflock - eBPF driven security for locking and auditing Linux machines☆157Feb 16, 2022Updated 4 years ago
- Description of how to practical execute hardnested attack against new mifare classic or against mifare plus cards☆28Sep 22, 2017Updated 9 years ago
- A twitter-clone written in Clojure intending to illustrate the web security libraries available in the Clojure Universe.☆12Jul 9, 2017Updated 9 years ago
- GoBPFLD is a pure go eBPF loader/userspace library☆20Feb 5, 2022Updated 4 years ago
- Public OCI-Image (docker image) Security Checker☆21Feb 16, 2026Updated 7 months ago
- A Canary which fires when uninstalled☆34Mar 16, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Go Damn Vulnerable Web App☆25Jul 16, 2024Updated 2 years ago
- kubernetes rootkit☆33Dec 18, 2023Updated 2 years ago
- A fast vulnerability scanner for package dependencies☆16Jul 22, 2026Updated 2 months ago
- Kubernetes has its “ADCS” -- How To Backdoor a Kubernetes in silence and more persistent?☆39Nov 16, 2025Updated 10 months ago
- Linux Kernel XFRM offload via eBPF/XDP☆37Jun 23, 2026Updated 3 months ago
- ☆25Jun 24, 2025Updated last year
- ☆13Jul 9, 2024Updated 2 years ago
- generates SHA256 in Arduino, no need of any external header files☆10Apr 27, 2019Updated 7 years ago
- Dynamic Indirect Syscalls via JOP/ROP in Pure no_std, no_alloc, no dependency Rust☆44Aug 6, 2025Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Core Aranya tech including policy compiler, parser, interface generator, VM, DAG☆17Updated this week
- Shared-storage based fencing☆27Sep 16, 2026Updated last week
- ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits☆144Feb 28, 2023Updated 3 years ago
- A GitHub Actions action for testing C/C++ projects☆19Jun 19, 2026Updated 3 months ago
- Cobalt Strike DNS beacon parser☆11Nov 29, 2021Updated 4 years ago
- Help deobfuscate VBScript☆18Jul 1, 2022Updated 4 years ago
- Reusable Cluster Components ("glue")☆16Aug 5, 2025Updated last year