Alternatives and similar repositories for knockles:

Users that are interested in knockles are comparing it to the libraries listed below

• quarkslab / peetch
  An eBPF playground
  ☆206Updated last year
• hikmat2337 / modreveal
  Utility to find hidden Linux kernel modules
  ☆144Updated 4 months ago
• exein-io / kepler
  NIST-based CVE lookup store and API powered by Rust.
  ☆130Updated 3 weeks ago
• Gui774ume / ssh-probe
  monitor and protect SSH sessions with eBPF
  ☆68Updated 3 years ago
• adgaultier / tamanoir
  An eBPF🐝 Keylogger with C2-based RCE payload delivery
  ☆259Updated last month
• guardicore / IPCDump
  ☆246Updated 4 years ago
• hashlookup / fleur
  Fleur implements a Bloom Filter library in C that is fully compatible with DCSO's Go and python implementations.
  ☆117Updated 2 years ago
• redcanaryco / ebpfmon
  ☆86Updated 9 months ago
• c-grimshaw / gosniff
  A fancy-schmancy tcpdump-esque TUI, programmed in Go.
  ☆368Updated 2 years ago
• evanrolfe / trayce_agent
  ☆54Updated last week
• TimeToogo / remote-pty
  Tricking shells into interactive mode when local PTY's are not available
  ☆144Updated 2 years ago
• noisysockets / nsh
  The Noisy Sockets CLI
  ☆261Updated 7 months ago
• harporoeder / ebpfsnitch
  Linux Application Level Firewall based on eBPF and NFQUEUE.
  ☆697Updated last year
• Gui774ume / ebpfkit
  ebpfkit is a rootkit powered by eBPF
  ☆789Updated 2 years ago
• linux-lock / bpflock
  bpflock - eBPF driven security for locking and auditing Linux machines
  ☆147Updated 3 years ago
• hackerschoice / zapper
  Zaps arguments and environment from the process list
  ☆197Updated last year
• liamg / siphon
  Intercept stdin/stdout/stderr for any process
  ☆198Updated 2 years ago
• redcanaryco / redcanary-ebpf-sensor
  Red Canary's eBPF Sensor
  ☆104Updated 9 months ago
• rpetrich / callander
  Simple syscall sandboxing for Linux
  ☆130Updated this week
• varnish / tinykvm
  VMM for native-performance sandboxing
  ☆593Updated this week
• jorisvink / sanctum
  Blessed sanctum, save us || Sanctum is a small, reviewable, capable, pq-safe and fully privilege seperated VPN daemon. || This is a read-…
  ☆47Updated this week
• alessandrod / snuffy
  Snuffy is a simple command line tool to inspect SSL/TLS data.
  ☆291Updated 4 years ago
• leomos / dwgd
  Docker WireGuard Driver
  ☆122Updated last year
• Thraetaona / Blitzping
  A very high-speed, configurable, and portable packet-crafting utility optimized for embedded devices
  ☆75Updated 3 months ago
• poettering / diskomator
  🦠 NVMe-TCP at your fingertips 🦠
  ☆307Updated 2 months ago
• trou / rsbkb
  CLI tools: encoders/decoders, CTF and reverse engineering helpers.
  ☆126Updated last week
• PurpleVsGreen / beacown
  ☆128Updated 2 years ago
• airbus-cert / dirtypipe-ebpf_detection
  An eBPF detection program for CVE-2022-0847
  ☆28Updated 2 years ago
• pathtofile / bad-bpf
  A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29
  ☆598Updated 9 months ago
• AGWA / whoarethey
  Determine Who Can Log In to an SSH Server
  ☆29Updated 2 years ago