A Linux Host-based Intrusion Detection System based on eBPF.
☆457Dec 20, 2023Updated 2 years ago
Alternatives and similar repositories for ehids-agent
Users that are interested in ehids-agent are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Hades is a Host-Based Intrusion Detection System based on eBPF(mainly)☆307May 24, 2026Updated 4 months ago
- A golang ebpf libary based on cilium/ebpf and datadog/ebpf.☆350Sep 8, 2026Updated 2 weeks ago
- Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and ser…☆2,679May 11, 2026Updated 4 months ago
- Collection of Linux eBPF slides/documents.☆983Nov 15, 2023Updated 2 years ago
- ebpfkit is a rootkit powered by eBPF☆861Feb 28, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆27Nov 24, 2021Updated 4 years ago
- A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29☆698Jul 7, 2024Updated 2 years ago
- ☆48Mar 19, 2022Updated 4 years ago
- Linux Runtime Security and Forensics using eBPF☆4,623Sep 15, 2026Updated last week
- Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.☆1,678Oct 19, 2023Updated 2 years ago
- Linux Kernel Runtime Integrity with eBPF☆187Nov 23, 2023Updated 2 years ago
- Inject ELF into remote process☆152Oct 20, 2023Updated 2 years ago
- 📦 Make security testing of K8s, Docker, and Containerd easier.☆4,755May 1, 2026Updated 4 months ago
- Linux EDR written in Golang and based on eBPF.☆246May 24, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Suricata IDS rules 用来检测红队渗透/恶意行为等，支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等☆1,287Jul 8, 2023Updated 3 years ago
- A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.☆1,979Apr 7, 2024Updated 2 years ago
- vArmor is a cloud-native container hardening system that leverages AppArmor/BPF/Seccomp and NetworkProxy technologies to enforce access c…☆503Updated this week
- eBPF-based Security Observability and Runtime Enforcement☆5,032Updated this week
- [WIP] 整理过去我和K8s、容器、虚拟化相关的分享 🧐☆3,166Nov 6, 2025Updated 10 months ago
- 《云原生安全：攻防实践与体系构建》资料仓库☆777Feb 19, 2023Updated 3 years ago
- 一个由长亭自研，直观而可扩展的容器安全 SDK☆117May 26, 2023Updated 3 years ago
- veinmind-tools 是由长亭科技自研，基于 veinmind-sdk 打造的容器安全工具集☆1,653Jan 10, 2024Updated 2 years ago
- bpflock - eBPF driven security for locking and auditing Linux machines☆157Feb 16, 2022Updated 4 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Artemis 是一套面向 Linux 主机的入侵检测系统（HIDS）☆19Sep 10, 2026Updated 2 weeks ago
- Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.☆15,481Updated this week
- By Kprobe technology Open Source Host-based Intrusion Detection System(HIDS), from E_Bwill.☆602Apr 1, 2021Updated 5 years ago
- 专注于JVM的运行时防御系统RASP☆297Jun 14, 2024Updated 2 years ago
- 安全、快捷、高交互、企业级的蜜罐管理系统，护网；支持多种协议蜜罐、蜜签、诱饵等功能。A safe, fast, highly interactive and enterprise level honeypot management system, supports mult…☆1,271Oct 17, 2023Updated 2 years ago
- bpf 学习仓库☆1,497Apr 30, 2022Updated 4 years ago
- Dectect syscall hooking using eBPF☆170Apr 28, 2023Updated 3 years ago
- GO开发而成，用于NIDS HIDS 分析的规则引擎，使用WorkerPool 高性能检测，支持多字段 "和" "或" 检测， 支持频率检测☆75Feb 8, 2025Updated last year
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…☆455Mar 24, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- 检测绝大部分所谓的内存免杀马☆729Sep 15, 2022Updated 4 years ago
- Low-level RASP: Protecting Applications Implemented in High-level Programming Languages☆71Oct 19, 2025Updated 11 months ago
- Codeql学习笔记☆903Apr 25, 2022Updated 4 years ago
- Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynam…☆696Dec 25, 2023Updated 2 years ago
- Hades is an cross-platform HIDS with kernel-space data collection.☆49May 29, 2023Updated 3 years ago
- Metarget is a framework providing automatic constructions of vulnerable infrastructures.☆1,420Jul 22, 2026Updated 2 months ago
- CloudWalker Platform☆672Dec 14, 2022Updated 3 years ago