Alternatives and similar repositories for bpfhacks

Users that are interested in bpfhacks are comparing it to the libraries listed below

• hackerschoice / memexec
  Circumventing "noexec" mount flag to execute arbitrary linux binaries by ptrace-less process injection
  ☆114Updated this week
• eeriedusk / nysm
  nysm is a stealth post-exploitation container.
  ☆248Updated last year
• hardenedlinux / userland-exec
  Userland exec PoC to be used as attack vector technique
  ☆85Updated 4 months ago
• hackerschoice / ttyinject
  Get root via TTY / TIOCSTI stuffing
  ☆76Updated 3 weeks ago
• lexfo / sshimpanzee
  SSHD Based implant supporting tunneling mecanisms to reach the C2 (DNS, ICMP, HTTP Encapsulation, HTTP/Socks Proxies, UDP...)
  ☆266Updated 2 months ago
• thalium / rkchk
  Rust Linux Kernel Module designed for LKM rootkit detection
  ☆45Updated 2 months ago
• MatheuZSecurity / detect-lkm-rootkit-cheatsheet
  Cheat sheet to detect and remove linux kernel rootkit
  ☆60Updated 5 months ago
• DualHorizon / blackpill
  A Linux kernel rootkit in Rust using a custom made type-2 hypervisor, eBPF XDP and TC programs
  ☆322Updated 4 months ago
• lockness-Ko / xz-vulnerable-honeypot
  An ssh honeypot with the XZ backdoor. CVE-2024-3094
  ☆141Updated last year
• SkyperTHC / curlshell
  reverse shell using curl
  ☆206Updated 3 months ago
• Velocidex / Linpmem
  Linpmem is a linux memory acquisition tool
  ☆84Updated last year
• skyler-ferrante / CVE-2024-28085
  WallEscape vulnerability in util-linux
  ☆51Updated last year
• hardenedvault / ved-ebpf
  VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF
  ☆158Updated 8 months ago
• ariary / volana
  🌒 Shell command obfuscation to avoid detection systems
  ☆125Updated 2 years ago
• kpcyrd / sh4d0wup
  Signing-key abuse and update exploitation framework
  ☆129Updated 2 weeks ago
• anvilsecure / ulexecve
  ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries…
  ☆188Updated last year
• mansk1es / CVE-2024-21111
  Oracle VirtualBox Elevation of Privilege (Local Privilege Escalation) Vulnerability
  ☆219Updated last year
• FoxIO-LLC / ja4tscan
  JA4TScan is an active TCP server fingerprinting tool.
  ☆78Updated 9 months ago
• akamai / DDSpoof
  DDSpoof is a tool that enables DHCP DNS Dynamic Update attacks against Microsoft DHCP servers in AD environments.
  ☆126Updated last year
• Hakumarachi / Bropper
  An automatic Blind ROP exploitation tool
  ☆204Updated last year
• jconwell / secret_handshake
  A prototype malware C2 channel using x509 certificates over mTLS
  ☆153Updated last year
• armosec / curing
  io_uring based rootkit
  ☆192Updated last month
• volexity / GoResolver
  GoResolver is a Go analysis tool using both Go symbol extraction and Control Flow Graph (CFG) similarity to identify and resolve the func…
  ☆62Updated last month
• TurtleARM / CVE-2023-0179-PoC
  ☆214Updated last year
• AmberWolfCyber / NachoVPN
  A delicious, but malicious SSL-VPN server 🌮
  ☆227Updated 6 months ago
• mephistolist / tito
  In-Memory Rootkit For Linux
  ☆70Updated this week
• liamg / siphon
  Intercept stdin/stdout/stderr for any process
  ☆198Updated 2 years ago
• MatheuZSecurity / Rootkit
  Collection of codes focused on Linux rootkits
  ☆110Updated 3 months ago
• blasty / JiaTansSSHAgent
  ☆134Updated last year
• b1ack0wl / vulnerability-write-ups
  This repo contains write ups of vulnerabilities I've found and exploits I've publicly developed.
  ☆147Updated 2 years ago