Example BPF program with LSM hooks
☆36Feb 24, 2021Updated 5 years ago
Alternatives and similar repositories for bpf-lsm
Users that are interested in bpf-lsm are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆27Nov 24, 2021Updated 4 years ago
- suidsnoop is a tool based on eBPF LSM programs that logs whenever a suid binary is executed and implements custom allow/deny lists.☆17Oct 31, 2021Updated 5 years ago
- LSM BPF module to block pwnkit (CVE-2021-4034) like exploits☆21Feb 17, 2022Updated 4 years ago
- bpflock - eBPF driven security for locking and auditing Linux machines☆157Feb 16, 2022Updated 4 years ago
- Fork from git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git (unstable and force pushed!)☆24Jun 15, 2023Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- 针对kubernetes中的RBAC可能被攻击 检测工具。Detection tool for possible attacks on RBAC in kubernetes.☆25Jan 4, 2024Updated 2 years ago
- vArmor-ebpf is a specialized project dedicated to maintaining the BPF code utilized by vArmor.☆46Jun 17, 2026Updated 4 months ago
- BPFContain is a container security daemon for GNU/Linux leveraging the power and safety of eBPF and Rust.☆61Jun 30, 2022Updated 4 years ago
- Working examples of KRSI (via BCC scripts).☆15Dec 21, 2020Updated 5 years ago
- Mimic is a eBPF virtual machine and emulator which runs in userspace☆29May 28, 2022Updated 4 years ago
- CO-RE code for the Netdata eBPF plugin.☆16Updated this week
- Trace deep kernel events through eBPF and lsm hooks☆43Feb 9, 2021Updated 5 years ago
- SysFlow edge processing pipeline☆18Jan 15, 2025Updated last year
- Source-code based coverage for eBPF programs actually running in the Linux kernel☆136Feb 6, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ebpH (Extended BPF Process Homeostasis) monitors process behavior on your system to establish normal behavioral patterns. ebpH reports an…☆43Dec 8, 2022Updated 3 years ago
- 🐝 BPFBox 📦 Exploring process confinement in eBPF☆107Jan 11, 2024Updated 2 years ago
- ☆18Nov 17, 2020Updated 5 years ago
- A simple example of map_in_map usage in libbpf☆10Mar 18, 2020Updated 6 years ago
- Linux Kernel Runtime Integrity with eBPF☆186Nov 23, 2023Updated 2 years ago
- [MICRO'20] LENS: A Low-level NVRAM Profiler [USENIX Security'23] NVLeak: Off-Chip Side-Channel Attacks via Non-Volatile Memory Systems☆14Jul 8, 2024Updated 2 years ago
- Automatic fuzz targets generation for Golang packages☆52Jun 4, 2026Updated 5 months ago
- Generate bpftrace eBPF programs online with GPT or LLM☆22Aug 7, 2024Updated 2 years ago
- Abandoned, use https://gitlab.com/setroubleshoot☆10Dec 9, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Linux Host-based Intrusion Detection System based on eBPF.☆459Dec 20, 2023Updated 2 years ago
- The kernel tracer that attaches eBPF probes to containers for capturing TLS traffic☆39Feb 8, 2026Updated 8 months ago
- a docker container behavior monitoring tool based on eBPF☆17Jul 22, 2023Updated 3 years ago
- CEF plugin for audisp (Linux Audit)☆23Aug 19, 2016Updated 10 years ago
- ☆17Apr 4, 2019Updated 7 years ago
- A collection of BPF examples☆39Mar 30, 2021Updated 5 years ago
- ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits☆145Feb 28, 2023Updated 3 years ago
- A PEG package/framework for Go☆13Jul 2, 2025Updated last year
- FreeBSD src tree http://www.FreeBSD.org/☆13Apr 13, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- USENIX - Vault'19: BPF programming Tutorial "Performance Analysis in Linux Storage Stack with BPF"☆18Feb 26, 2019Updated 7 years ago
- SOSCON19 session - "Faster Packet Processing in Linux: XDP" source code☆17Oct 17, 2019Updated 7 years ago
- Open Source runtime tool which help to detect malware code execution and run time mis-configuration change on a kubernetes cluster☆36Jan 22, 2022Updated 4 years ago
- ☆28Jun 2, 2024Updated 2 years ago
- Qiling Framework Documentation☆18Mar 9, 2025Updated last year
- Memory protection and randomization tests (not limited to PaX enabled kernels)☆14Mar 5, 2024Updated 2 years ago
- Subgraph Citadel image builder☆17Apr 2, 2019Updated 7 years ago