hackerschoice / bpfhacksLinks
eBPF hacks
☆187Updated 8 months ago
Alternatives and similar repositories for bpfhacks
Users that are interested in bpfhacks are comparing it to the libraries listed below
Sorting:
- nysm is a stealth post-exploitation container.☆255Updated 2 months ago
- Circumventing "noexec" mount flag to execute arbitrary linux binaries by ptrace-less process injection☆120Updated 2 months ago
- Userland exec PoC to be used as attack vector technique☆85Updated 6 months ago
- Get root via TTY / TIOCSTI stuffing☆76Updated 3 months ago
- WallEscape vulnerability in util-linux☆51Updated last year
- A Linux kernel rootkit in Rust using a custom made type-2 hypervisor, eBPF XDP and TC programs☆334Updated 2 months ago
- SSHD Based implant supporting tunneling mecanisms to reach the C2 (DNS, ICMP, HTTP Encapsulation, HTTP/Socks Proxies, UDP...)☆272Updated 5 months ago
- ☆134Updated last year
- Cheat sheet to detect and remove linux kernel rootkit☆68Updated 8 months ago
- An ssh honeypot with the XZ backdoor. CVE-2024-3094☆144Updated last year
- reverse shell using curl☆207Updated 6 months ago
- io_uring based rootkit☆225Updated 3 months ago
- Rust Linux Kernel Module designed for LKM rootkit detection☆51Updated 5 months ago
- In-Memory Rootkit For Linux and BSD☆76Updated 2 weeks ago
- Heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly (or precompiled binary) payloads directly into x86…☆137Updated 2 years ago
- Collection of codes focused on Linux rootkits☆148Updated last week
- ROPDump is a command-line tool designed to analyze binary executables for potential Return-Oriented Programming (ROP) gadgets, buffer ove…☆87Updated last year
- eBPF Memory Dump Tool☆82Updated 2 months ago
- ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries…☆191Updated last year
- ☆55Updated 10 months ago
- Signing-key abuse and update exploitation framework☆130Updated 3 months ago
- Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypa…☆256Updated last year
- An automatic Blind ROP exploitation tool☆204Updated 2 years ago
- ElfDoor-gcc is an LD_PRELOAD that hijacks gcc to inject malicious code into binaries during linking, without touching the source code.☆119Updated 4 months ago
- This repo contains write ups of vulnerabilities I've found and exploits I've publicly developed.☆147Updated 2 years ago
- Advanced exploits that I wrote for Pwn2Own competitions and other occasions☆169Updated last year
- Oracle VirtualBox Elevation of Privilege (Local Privilege Escalation) Vulnerability☆219Updated last year
- ☆205Updated 9 months ago
- Remote Command executor☆77Updated 2 years ago
- Deluder is a tool for intercepting traffic of proxy unaware applications. Currently, Deluder supports OpenSSL, GnuTLS, SChannel, WinSock …☆201Updated 10 months ago