Alternatives and similar repositories for knockles:

Users that are interested in knockles are comparing it to the libraries listed below

• krisnova / xpid
  Linux Process Discovery. C Library, Go bindings, Runtime.
  ☆220Updated 2 years ago
• citronneur / pamspy
  Credentials Dumper for Linux using eBPF
  ☆1,136Updated 6 months ago
• hikmat2337 / modreveal
  Utility to find hidden Linux kernel modules
  ☆144Updated 3 months ago
• Gui774ume / ssh-probe
  monitor and protect SSH sessions with eBPF
  ☆66Updated 3 years ago
• c-grimshaw / gosniff
  A fancy-schmancy tcpdump-esque TUI, programmed in Go.
  ☆368Updated 2 years ago
• exein-io / kepler
  NIST-based CVE lookup store and API powered by Rust.
  ☆129Updated last month
• redcanaryco / oxidebpf
  A Rust library for managing eBPF programs.
  ☆119Updated last year
• adgaultier / tamanoir
  An eBPF🐝 Keylogger with C2-based RCE payload delivery
  ☆257Updated 2 weeks ago
• noisysockets / nsh
  The Noisy Sockets CLI
  ☆261Updated 6 months ago
• Gui774ume / ebpfkit-monitor
  ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
  ☆126Updated 2 years ago
• TimeToogo / remote-pty
  Tricking shells into interactive mode when local PTY's are not available
  ☆144Updated 2 years ago
• redcanaryco / ebpfmon
  ☆86Updated 8 months ago
• poettering / diskomator
  🦠 NVMe-TCP at your fingertips 🦠
  ☆304Updated 2 months ago
• airbus-cert / dirtypipe-ebpf_detection
  An eBPF detection program for CVE-2022-0847
  ☆28Updated 2 years ago
• hackerschoice / zapper
  Zaps arguments and environment from the process list
  ☆197Updated 11 months ago
• redcanaryco / redcanary-ebpf-sensor
  Red Canary's eBPF Sensor
  ☆103Updated 8 months ago
• liamg / siphon
  Intercept stdin/stdout/stderr for any process
  ☆197Updated 2 years ago
• alessandrod / snuffy
  Snuffy is a simple command line tool to inspect SSL/TLS data.
  ☆291Updated 4 years ago
• winterknife / PINKPANTHER
  Windows x64 handcrafted token stealing kernel-mode shellcode
  ☆506Updated 11 months ago
• vimpostor / copycat
  A library for intercepting system calls
  ☆72Updated 2 months ago
• hardenedvault / ved-ebpf
  VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF
  ☆155Updated 6 months ago
• hashlookup / fleur
  Fleur implements a Bloom Filter library in C that is fully compatible with DCSO's Go and python implementations.
  ☆117Updated 2 years ago
• synacktiv / io_uring_scanner
  io_uring based network scanner written in Rust
  ☆44Updated 2 years ago
• AGWA / whoarethey
  Determine Who Can Log In to an SSH Server
  ☆29Updated 2 years ago
• linux-lock / bpflock
  bpflock - eBPF driven security for locking and auditing Linux machines
  ☆147Updated 3 years ago
• lkarlslund / fastsync
  Fast syncronization across networks using speedy compression, lots of parallelization and fast hashmaps for keeping track of things inter…
  ☆95Updated 7 months ago
• synacktiv / shh
  Systemd Hardening Helper - Mirror of https://github.com/desbma/shh
  ☆120Updated 2 weeks ago
• landlock-lsm / go-landlock
  A Go library for the Linux Landlock sandboxing feature
  ☆176Updated 3 weeks ago
• pathtofile / bad-bpf
  A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29
  ☆594Updated 8 months ago
• jamespwilliams / dns-over-ping
  DNS-over-ping(8)
  ☆125Updated 2 years ago