Alternatives and similar repositories for knockles

Users that are interested in knockles are comparing it to the libraries listed below

• krisnova / xpid
  Linux Process Discovery. C Library, Go bindings, Runtime.
  ☆223Updated 3 years ago
• Gui774ume / ssh-probe
  monitor and protect SSH sessions with eBPF
  ☆70Updated 4 years ago
• h2337 / modreveal
  Utility to find hidden Linux kernel modules
  ☆144Updated last month
• exein-io / kepler
  NIST-based CVE lookup store and API powered by Rust.
  ☆132Updated this week
• jorisvink / sanctum
  Blessed sanctum, save us || Sanctum is a small, reviewable, capable, pq-secure and fully privilege seperated VPN daemon. || This is a rea…
  ☆79Updated this week
• c-grimshaw / gosniff
  A fancy-schmancy tcpdump-esque TUI, programmed in Go.
  ☆371Updated 3 years ago
• TimeToogo / remote-pty
  Tricking shells into interactive mode when local PTY's are not available
  ☆145Updated 3 years ago
• armosec / curing
  io_uring based rootkit
  ☆235Updated 4 months ago
• adgaultier / tamanoir
  An eBPF🐝 Keylogger with C2-based RCE payload delivery
  ☆294Updated 4 months ago
• redcanaryco / ebpfmon
  ☆89Updated last year
• harporoeder / ebpfsnitch
  Linux Application Level Firewall based on eBPF and NFQUEUE.
  ☆704Updated last year
• noisysockets / nsh
  The Noisy Sockets CLI
  ☆264Updated last year
• hackerschoice / zapper
  Zaps arguments and environment from the process list
  ☆227Updated last year
• poettering / diskomator
  🦠 NVMe-TCP at your fingertips 🦠
  ☆310Updated 7 months ago
• criblio / appscope
  Gain observability into any Linux command or application with no code modification
  ☆283Updated last year
• tarsal-oss / kflowd
  Kernel-based Process Monitoring on Linux Endpoints for File System, TCP and UDP Networking Events and optionally DNS, HTTP and SYSLOG App…
  ☆68Updated 5 months ago
• lkarlslund / fastsync
  Fast syncronization across networks using speedy compression, lots of parallelization and fast hashmaps for keeping track of things inter…
  ☆96Updated last week
• alessandrod / snuffy
  Snuffy is a simple command line tool to inspect SSL/TLS data.
  ☆292Updated 4 years ago
• Thraetaona / Blitzping
  A very high-speed, configurable, and portable packet-crafting utility optimized for embedded devices
  ☆79Updated 8 months ago
• redcanaryco / redcanary-ebpf-sensor
  Red Canary's eBPF Sensor
  ☆109Updated 3 months ago
• liamg / siphon
  Intercept stdin/stdout/stderr for any process
  ☆199Updated 2 years ago
• simmsb / traceroute-spoof
  Messing around with XDP and eBPF
  ☆20Updated 3 years ago
• scottgerring / minderbinder
  Use eBPF to inject chaos into local processes
  ☆65Updated last year
• aojea / netkat
  netcat using netstack userspace library and eBPF
  ☆137Updated 4 years ago
• M3rcuryLake / Nyxelf
  Nyxelf is a highly effective tool tailored for analyzing malicious Linux ELF binaries, offering comprehensive support for both static and…
  ☆108Updated 7 months ago
• alegrey91 / harpoon
  🔍 Seccomp profiling and function-level tracing tool.
  ☆163Updated 3 months ago
• ancat / egrets
  egrets monitors egress
  ☆46Updated 5 years ago
• Kiinitix / KernelFaaS
  eBPF-Direct is a high-performance serverless execution layer that runs functions directly inside the Linux kernel using eBPF
  ☆28Updated 5 months ago
• system-transparency / stboot
  Paused mirror. Official repository at https://git.glasklar.is/system-transparency/core/stboot
  ☆115Updated last year
• dlenski / what-vpn
  Identify servers running various SSL VPNs based on protocol-specific behaviors
  ☆87Updated 11 months ago