Alternatives and similar repositories for knockles:

Users that are interested in knockles are comparing it to the libraries listed below

• krisnova / xpid
  Linux Process Discovery. C Library, Go bindings, Runtime.
  ☆219Updated 2 years ago
• citronneur / pamspy
  Credentials Dumper for Linux using eBPF
  ☆1,131Updated 5 months ago
• exein-io / kepler
  NIST-based CVE lookup store and API powered by Rust.
  ☆129Updated 3 weeks ago
• quarkslab / peetch
  An eBPF playground
  ☆206Updated last year
• TimeToogo / remote-pty
  Tricking shells into interactive mode when local PTY's are not available
  ☆143Updated 2 years ago
• h2337 / modreveal
  Utility to find hidden Linux kernel modules
  ☆144Updated 2 months ago
• Gui774ume / ssh-probe
  monitor and protect SSH sessions with eBPF
  ☆66Updated 3 years ago
• liamg / siphon
  Intercept stdin/stdout/stderr for any process
  ☆198Updated 2 years ago
• c-grimshaw / gosniff
  A fancy-schmancy tcpdump-esque TUI, programmed in Go.
  ☆367Updated 2 years ago
• hackerschoice / zapper
  Zaps arguments and environment from the process list
  ☆196Updated 10 months ago
• redcanaryco / ebpfmon
  ☆86Updated 7 months ago
• guardicore / IPCDump
  ☆247Updated 3 years ago
• redcanaryco / redcanary-ebpf-sensor
  Red Canary's eBPF Sensor
  ☆101Updated 7 months ago
• hackerschoice / bpfhacks
  eBPF hacks
  ☆182Updated 2 months ago
• anvilsecure / ulexecve
  ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries…
  ☆183Updated last year
• rpetrich / callander
  Simple syscall sandboxing for Linux
  ☆130Updated last week
• synacktiv / io_uring_scanner
  io_uring based network scanner written in Rust
  ☆44Updated 2 years ago
• noisysockets / nsh
  The Noisy Sockets CLI
  ☆258Updated 5 months ago
• jorisvink / sanctum
  Blessed sanctum, save us || Sanctum is a small, reviewable, capable and fully privilege seperated VPN daemon. || This is a read-only mirr…
  ☆48Updated this week
• harporoeder / ebpfsnitch
  Linux Application Level Firewall based on eBPF and NFQUEUE.
  ☆695Updated last year
• facebookexperimental / reverie
  An ergonomic and safe syscall interception framework for Linux.
  ☆582Updated last week
• Gui774ume / ebpfkit
  ebpfkit is a rootkit powered by eBPF
  ☆780Updated 2 years ago
• poettering / diskomator
  🦠 NVMe-TCP at your fingertips 🦠
  ☆298Updated last month
• evanrolfe / trayce_agent
  ☆53Updated this week
• Thraetaona / Blitzping
  A very high-speed, configurable, and portable packet-crafting utility optimized for embedded devices
  ☆73Updated last month
• nnsee / fileless-elf-exec
  Execute ELF files without dropping them on disk
  ☆492Updated 8 months ago
• vimpostor / copycat
  A library for intercepting system calls
  ☆69Updated last month
• ofirc / k8s-sniff-https
  A simple mitmproxy blueprint to intercept HTTPS traffic from app running on Kubernetes
  ☆64Updated 2 weeks ago
• alessandrod / snuffy
  Snuffy is a simple command line tool to inspect SSL/TLS data.
  ☆291Updated 4 years ago
• kpcyrd / sh4d0wup
  Signing-key abuse and update exploitation framework
  ☆123Updated last month