eeriedusk / knockles

Related projects: ⓘ

• krisnova / xpid
  Linux Process Discovery. C Library, Go bindings, Runtime.
  ☆218Updated 2 years ago
• quarkslab / peetch
  An eBPF playground
  ☆186Updated 9 months ago
• evilsocket / ebpf-process-anomaly-detection
  Process behaviour anomaly detection using eBPF and unsupervised-learning Autoencoders
  ☆120Updated 2 years ago
• exein-io / kepler
  NIST-based CVE lookup store and API powered by Rust.
  ☆124Updated 8 months ago
• citronneur / pamspy
  Credentials Dumper for Linux using eBPF
  ☆1,111Updated last week
• Gui774ume / ssh-probe
  monitor and protect SSH sessions with eBPF
  ☆65Updated 3 years ago
• jafarlihi / modreveal
  Utility to find hidden Linux kernel modules
  ☆144Updated 11 months ago
• TimeToogo / remote-pty
  Tricking shells into interactive mode when local PTY's are not available
  ☆141Updated 2 years ago
• noisysockets / nsh
  The Noisy Sockets CLI
  ☆253Updated 3 months ago
• redcanaryco / oxidebpf
  A Rust library for managing eBPF programs.
  ☆114Updated 6 months ago
• hackerschoice / zapper
  Zaps arguments and environment from the process list
  ☆141Updated 4 months ago
• c-grimshaw / gosniff
  A fancy-schmancy tcpdump-esque TUI, programmed in Go.
  ☆362Updated 2 years ago
• 62726164 / dns-exfil
  ☆61Updated this week
• liamg / siphon
  Intercept stdin/stdout/stderr for any process
  ☆192Updated last year
• redcanaryco / redcanary-ebpf-sensor
  Red Canary's eBPF Sensor
  ☆97Updated 2 months ago
• kitabisa / teler-v3
  ☆44Updated this week
• hackerschoice / bpfhacks
  eBPF hacks
  ☆170Updated last week
• poettering / diskomator
  🦠 NVMe-TCP at your fingertips 🦠
  ☆294Updated 4 months ago
• rpetrich / callander
  Simple syscall sandboxing for Linux
  ☆127Updated last month
• Gui774ume / ebpfkit-monitor
  ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
  ☆120Updated last year
• rafaeldtinoco / conntracker
  ☆62Updated this week
• hardenedvault / ved-ebpf
  VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF
  ☆147Updated last week
• guardicore / IPCDump
  ☆246Updated 3 years ago
• redcanaryco / ebpfmon
  ☆82Updated 2 months ago
• BishopFox / asminject
  Heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly (or precompiled binary) payloads directly into x86…
  ☆112Updated last year
• synacktiv / io_uring_scanner
  io_uring based network scanner written in Rust
  ☆43Updated last year
• anvilsecure / ulexecve
  ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries…
  ☆176Updated 8 months ago
• jamespwilliams / dns-over-ping
  DNS-over-ping(8)
  ☆127Updated last year
• liamg / grace
  It's strace, with colours.
  ☆258Updated last year
• linux-lock / bpflock
  bpflock - eBPF driven security for locking and auditing Linux machines
  ☆136Updated 2 years ago