containerscrew / rootisnakedLinks
Simple root privilege escalation detection using eBPF π
β13Updated 7 months ago
Alternatives and similar repositories for rootisnaked
Users that are interested in rootisnaked are comparing it to the libraries listed below
Sorting:
- Publications from the eBPF foundationβ27Updated last week
- β82Updated last month
- A simple mitmproxy blueprint to intercept HTTPS traffic from app running on Kubernetesβ71Updated 4 months ago
- π Seccomp profiling and function-level tracing tool.β160Updated 2 months ago
- β89Updated last year
- β22Updated last month
- β21Updated 3 months ago
- Demo repository for running eBPF in GitHub Actionsβ22Updated 5 months ago
- A replacement for "kubectl exec" that works over WebSocket connections.β40Updated last year
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.β109Updated 8 months ago
- Linux Process Discovery. C Library, Go bindings, Runtime.β222Updated 3 years ago
- Use eBPF to inject chaos into local processesβ65Updated 11 months ago
- Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko geneβ¦β104Updated last year
- β13Updated 7 months ago
- Generative and mutative fuzzer for Kubernetes admission controller chains by automatically parsing the cluster api specification.β74Updated last year
- Threat Modeling (based on STRIDE approach) for Kubernetes systems.β25Updated 10 months ago
- β44Updated 3 months ago
- AttachΓ© provides an emulation layer for Cloud Provider IMDS APIsβ59Updated last year
- proof-of-concept example of using eBPF to Monitor for eBPF Map tamperingβ22Updated 4 years ago
- Pentester-focused Docker registry tool to enumerate and pull imagesβ33Updated 3 weeks ago
- This tool have the power to hide any PID/directory in the Linux kernelβ29Updated 11 months ago
- Generate a variety of suspect actions that are detected by Falco rulesetsβ107Updated 3 months ago
- Kernel-based Process Monitoring on Linux Endpoints for File System, TCP and UDP Networking Events and optionally DNS, HTTP and SYSLOG Appβ¦β67Updated 4 months ago
- Post-Quantum Cryptography Scanner - Scan SSH/TLS servers for PQC supportβ84Updated last month
- Research on various techniques to bypass default falco ruleset (based on falco v0.28.1).β84Updated last year
- TC, XDP, KProbe and CGroup eBPF based simple Ethernet interface traffic monitor and reporting toolβ119Updated 2 weeks ago
- Adversary emulation for EDR/SIEM testing (macOS/Linux)β50Updated 2 weeks ago
- Intent driven security automation frameworkβ25Updated 3 weeks ago
- Goby CLI eBPF Project Generatorβ32Updated 6 months ago
- β88Updated 3 months ago