Workshop: Forensic Analysis of eBPF based Linux Rootkits
☆15Jul 9, 2026Updated last week
Alternatives and similar repositories for bpf-rootkit-workshop
Users that are interested in bpf-rootkit-workshop are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Carve $MFT records from a chunk of data (for instance a memory dump)☆16Aug 21, 2016Updated 9 years ago
- A Volatility plugin to detect hidden Linux Kernel Modules☆15Jul 11, 2025Updated last year
- Quick ESXi Log Parser☆33Oct 20, 2025Updated 9 months ago
- Linux BPF plugins for Volatility3☆23Jan 19, 2024Updated 2 years ago
- Volatility3 Linux profiles☆81Jun 29, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Hunt for SQLite files used by various applications☆31Jun 17, 2026Updated last month
- AI analyzer for Hayabusa results.☆24Updated this week
- Obfuscate payloads using IPv4, IPv6, MAC or UUID strings☆24Feb 17, 2024Updated 2 years ago
- Triage automation tool☆22Updated this week
- 读过的安全文章离线归档 | begin in 2023.11.23☆18Jun 4, 2024Updated 2 years ago
- Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/ta…☆34Jun 5, 2026Updated last month
- Binaries for the log2timeline projects and dependencies☆40Updated this week
- A few STUXNET samples and live traffic captures from July 2010 while many stuxnet implants were still operational.☆28Sep 17, 2024Updated last year
- A collection of PowerShell scripts for analyzing macOS Forensic Artifacts☆33Mar 16, 2026Updated 4 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Set of scripts to index PCAP files and retrieve packets☆14Sep 10, 2015Updated 10 years ago
- iptables-trace is an eBPF enhanced iptables-TRACE alternative iptables TRACE. GPL-3.0 license☆14Feb 3, 2025Updated last year
- ☆19May 22, 2024Updated 2 years ago
- RNNs for sql-injection detection 🔍. built in python with tensorflow and keras☆12Sep 14, 2024Updated last year
- Neural network RDP cache reconstruction tool☆33May 21, 2026Updated 2 months ago
- Kubernetes 集群部署 - 一镜到底纯手工部署 K8S 学习集群工作原理☆16Jan 12, 2025Updated last year
- This repository provides a comprehensive Digital Footprint Checklist to help individuals manage their online presence and enhance privacy…☆18Dec 25, 2024Updated last year
- python3 version of cloacked-pixel.☆13Oct 8, 2022Updated 3 years ago
- Sniff and attack networks that use IP-in-IP or VXLAN encapsulation protocols.☆25Apr 27, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Linux内核驱动demo仓（lkm、ldd）☆13Apr 24, 2025Updated last year
- Sandbox samples and monitor them with kunai☆29Updated this week
- 精简版搜集工具☆15Sep 4, 2024Updated last year
- Zero-dependency Linux memory forensics, leveraging kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug…☆166Updated this week
- Forensic Browser History Analyzer - Cross-platform browser history extractor (Chrome, Firefox, IE/Edge, Brave, Opera, Vivaldi)☆35Apr 11, 2026Updated 3 months ago
- Write-ups for crackmes and CTF challenges☆52Nov 24, 2022Updated 3 years ago
- Free ladder & sequential (grafcet) languages as used on many PLC for programming automation process.☆10Apr 3, 2023Updated 3 years ago
- Virtual Enigma and Bombe eBPF simulation for real-time network packet encryption and cryptanalysis on Linux☆17Aug 4, 2025Updated 11 months ago
- A PoC to deploy a Sliver Agent with amsi bypass, process injection, hollowing and OpSec☆31Oct 2, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Memory-safe FUSE reimplementation of ext4 and btrfs in Rust with block-level MVCC and RaptorQ self-healing. 22-crate workspace, zero unsa…☆20Updated this week
- Governance Platform by @NC3-LU☆12Jul 10, 2026Updated last week
- Finds event logs between two time points. Useful for helpdesk/support/malware analysis.☆50Feb 26, 2019Updated 7 years ago
- Golang 写的免杀框架，通过系统调用等手法bypass AV/EDR☆23Jul 11, 2024Updated 2 years ago
- 非流量触发Ring 3后门/Non-traffic triggers Ring 3 backdoor☆22May 1, 2024Updated 2 years ago
- Collection of scripts provided for public use☆43Updated this week
- 针对windows rootkit的一些检测，分别从进程、端口、文件这三个方面进行检测。☆21Jan 16, 2025Updated last year