Alternatives and similar repositories for elfexec:

Users that are interested in elfexec are comparing it to the libraries listed below

• jwilk / ttyjack
  proof-of-concept tty hijacking via TIOCSTI or TIOCLINUX
  ☆35Updated 2 weeks ago
• dankamongmen / omphalos
  A tool for network enumeration and domination.
  ☆52Updated last year
• bediger4000 / userlandexec
  userland exec for Linux x86_64
  ☆67Updated 3 years ago
• marty1885 / landlock-unveil
  OpenBSD unveil(2) like function in Linux using Landlock
  ☆25Updated last month
• taviso / scanlimits
  Tool to examine the behaviour of setuid binaries under constrained limits.
  ☆61Updated 4 years ago
• ForensicITGuy / libpreloadvaccine
  Whitelisting LD_PRELOAD libraries using LD_AUDIT
  ☆62Updated 3 years ago
• JonathonReinhart / nosecmem
  Demonstrate ability to read memfd_secret() data from the kernel
  ☆58Updated last year
• pathtofile / bpf-pipesnoop
  Example program using eBPF to log data being based in using shell pipes
  ☆41Updated 4 years ago
• armosec / curing
  io_uring based rootkit
  ☆157Updated 2 weeks ago
• milabs / lkrg-bypass
  LKRG bypass methods
  ☆72Updated 5 years ago
• guardicore / IPCDump
  ☆246Updated 4 years ago
• Gui774ume / ebpfkit-monitor
  ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
  ☆130Updated 2 years ago
• redcanaryco / ebpfmon
  ☆88Updated 10 months ago
• GJDuck / RedFat
  A binary hardening system
  ☆107Updated last year
• giuseppe / easyseccomp
  DSL language to write seccomp filters
  ☆37Updated last year
• guitmz / memrun
  Small tool to run ELF binaries from memory with a given process name
  ☆166Updated 3 years ago
• antitree / syscall2seccomp
  Build custom Docker seccomp profiles for containers by finding syscalls it uses.
  ☆90Updated 4 years ago
• eeriedusk / knockles
  eBPF Port Knocking Tool
  ☆233Updated last year
• trailofbits / ebpfpub
  ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.
  ☆116Updated 2 years ago
• xyproto / cdetect
  Detect which compiler and compiler version a Linux executable (in the ELF format) was compiled with
  ☆30Updated last year
• trou / rsbkb
  CLI tools: encoders/decoders, CTF and reverse engineering helpers.
  ☆126Updated last week
• landhb / DrawBridge
  Layer 4 Single Packet Authentication Linux kernel module utilizing Netfilter hooks and kernel supported Berkeley Packet Filters (BPF)
  ☆114Updated last year
• linuxthor / sixnix
  Multifarious x86-64 ELF binary that can be built once and run on six different *nix variants. Behaves differently if running on Linux, BS…
  ☆15Updated 10 years ago
• quarkslab / peetch
  An eBPF playground
  ☆206Updated last year
• dimkr / papaw
  A simple, decompressing executable packer
  ☆46Updated 2 years ago
• pavel-kirienko / cpu-load-side-channel
  Side-channel file transfer between independent VMs or processes executed on the same physical host.
  ☆49Updated 3 years ago
• linux-lock / bpflock
  bpflock - eBPF driven security for locking and auditing Linux machines
  ☆147Updated 3 years ago
• jart / pledge
  OpenBSD APIs ported to Linux userspace using SECCOMP BPF and Landlock LSM
  ☆112Updated last year
• anko / xkbcat
  simple sudoless X11 keylogger
  ☆116Updated last year
• giuseppe / become-root
  minimal tool for creating a new user namespace with multiple UIDs/GIDs mapped inside
  ☆53Updated 3 years ago