Alternatives and similar repositories for bpfhacks:

Users that are interested in bpfhacks are comparing it to the libraries listed below

• hackerschoice / ttyinject
  Get root via TTY / TIOCSTI stuffing
  ☆70Updated 8 months ago
• hardenedlinux / userland-exec
  Userland exec PoC to be used as attack vector technique
  ☆81Updated last month
• eeriedusk / nysm
  nysm is a stealth post-exploitation container.
  ☆245Updated last year
• lexfo / sshimpanzee
  SSHD Based implant supporting tunneling mecanisms to reach the C2 (DNS, ICMP, HTTP Encapsulation, HTTP/Socks Proxies, UDP...)
  ☆256Updated 2 weeks ago
• hackerschoice / memexec
  Circumventing "noexec" mount flag to execute arbitrary linux binaries by ptrace-less process injection
  ☆89Updated last month
• DualHorizon / blackpill
  A Linux kernel rootkit in Rust using a custom made type-2 hypervisor, eBPF XDP and TC programs
  ☆272Updated 2 months ago
• airbus-seclab / soxy
  A suite of services (SOCKS, FTP, shell, etc.) over Citrix, VMware Horizon and native Windows RDP virtual channels.
  ☆187Updated last month
• grahamhelton / USP
  Establishes persistence on a Linux system by creating a udev rule that triggers the execution of a specified payload (binary or script)
  ☆140Updated 6 months ago
• MatheuZSecurity / Rootkit
  Collection of codes focused on Linux rootkits
  ☆92Updated 3 weeks ago
• g4l4drim / ChromeDump
  ☆55Updated 5 months ago
• mansk1es / CVE-2024-21111
  Oracle VirtualBox Elevation of Privilege (Local Privilege Escalation) Vulnerability
  ☆218Updated 10 months ago
• mephistolist / tito
  In-Memory Rootkit For Linux
  ☆70Updated last month
• Velocidex / Linpmem
  Linpmem is a linux memory acquisition tool
  ☆78Updated 10 months ago
• skyler-ferrante / CVE-2024-28085
  WallEscape vulnerability in util-linux
  ☆51Updated 11 months ago
• hardenedvault / ved-ebpf
  VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF
  ☆154Updated 6 months ago
• SkyperTHC / curlshell
  reverse shell using curl
  ☆205Updated last month
• Warxim / deluder
  Deluder is a tool for intercepting traffic of proxy unaware applications. Currently, Deluder supports OpenSSL, GnuTLS, SChannel, WinSock …
  ☆185Updated 5 months ago
• kpcyrd / sh4d0wup
  Signing-key abuse and update exploitation framework
  ☆123Updated last week
• anvilsecure / ulexecve
  ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries…
  ☆183Updated last year
• mav8557 / Father
  LD_PRELOAD rootkit
  ☆129Updated last year
• AmberWolfCyber / NachoVPN
  A delicious, but malicious SSL-VPN server 🌮
  ☆215Updated 3 months ago
• zerozenxlabs / CVE-2023-36424
  Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation
  ☆126Updated last year
• nccgroup / cq
  ☆115Updated last year
• 0xdea / blindsight
  Red teaming tool to dump LSASS memory, bypassing basic countermeasures.
  ☆206Updated 2 months ago
• Kudaes / Split
  Apply a divide and conquer approach to bypass EDRs
  ☆279Updated last year
• Hakumarachi / Bropper
  An automatic Blind ROP exploitation tool
  ☆199Updated last year
• milabs / kopycat
  Linux Kernel module-less implant (backdoor)
  ☆72Updated 4 years ago
• trickster0 / NamelessC2
  Nameless C2 - A C2 with all its components written in Rust
  ☆263Updated 5 months ago
• MatheuZSecurity / detect-lkm-rootkit-cheatsheet
  Cheat sheet to detect and remove linux kernel rootkit
  ☆52Updated 3 months ago
• boku7 / StringReaper
  Reaping treasures from strings in remote processes memory
  ☆246Updated last month