Alternatives and similar repositories for bpfhacks:

Users that are interested in bpfhacks are comparing it to the libraries listed below

• hackerschoice / memexec
  Circumventing "noexec" mount flag to execute arbitrary linux binaries by ptrace-less process injection
  ☆107Updated last week
• eeriedusk / nysm
  nysm is a stealth post-exploitation container.
  ☆246Updated last year
• hardenedlinux / userland-exec
  Userland exec PoC to be used as attack vector technique
  ☆84Updated 2 months ago
• hackerschoice / ttyinject
  Get root via TTY / TIOCSTI stuffing
  ☆71Updated 9 months ago
• DualHorizon / blackpill
  A Linux kernel rootkit in Rust using a custom made type-2 hypervisor, eBPF XDP and TC programs
  ☆286Updated 3 months ago
• lexfo / sshimpanzee
  SSHD Based implant supporting tunneling mecanisms to reach the C2 (DNS, ICMP, HTTP Encapsulation, HTTP/Socks Proxies, UDP...)
  ☆263Updated last month
• anvilsecure / ulexecve
  ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries…
  ☆184Updated last year
• lockness-Ko / xz-vulnerable-honeypot
  An ssh honeypot with the XZ backdoor. CVE-2024-3094
  ☆141Updated last year
• hardenedvault / ved-ebpf
  VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF
  ☆156Updated 7 months ago
• SkyperTHC / curlshell
  reverse shell using curl
  ☆206Updated last month
• blasty / JiaTansSSHAgent
  ☆133Updated last year
• kpcyrd / sh4d0wup
  Signing-key abuse and update exploitation framework
  ☆125Updated last week
• Velocidex / Linpmem
  Linpmem is a linux memory acquisition tool
  ☆82Updated 11 months ago
• BishopFox / asminject
  Heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly (or precompiled binary) payloads directly into x86…
  ☆127Updated 2 years ago
• hackerschoice / bincrypter
  Pack/Encrypt/Obfuscate ELF + SHELL scripts
  ☆195Updated this week
• reveng007 / reveng_rtkit
  Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypa…
  ☆247Updated last year
• sad0p / d0zer
  Elf binary infector written in Go.
  ☆208Updated 3 months ago
• g4l4drim / ChromeDump
  ☆55Updated 6 months ago
• AmberWolfCyber / NachoVPN
  A delicious, but malicious SSL-VPN server 🌮
  ☆217Updated 4 months ago
• mephistolist / tito
  In-Memory Rootkit For Linux
  ☆69Updated 2 months ago
• thalium / rkchk
  Rust Linux Kernel Module designed for LKM rootkit detection
  ☆39Updated last month
• jconwell / secret_handshake
  A prototype malware C2 channel using x509 certificates over mTLS
  ☆153Updated last year
• b1ack0wl / vulnerability-write-ups
  This repo contains write ups of vulnerabilities I've found and exploits I've publicly developed.
  ☆145Updated 2 years ago
• milabs / kopycat
  Linux Kernel module-less implant (backdoor)
  ☆72Updated 4 years ago
• 0xor0ne / recmd
  Remote Command executor
  ☆74Updated 2 years ago
• MatheuZSecurity / detect-lkm-rootkit-cheatsheet
  Cheat sheet to detect and remove linux kernel rootkit
  ☆55Updated 4 months ago
• eurecom-s3 / lemon
  eBPF Memory Dump Tool
  ☆64Updated last month
• Hakumarachi / Bropper
  An automatic Blind ROP exploitation tool
  ☆201Updated last year
• synacktiv / bbs
  bbs is a router for SOCKS and HTTP proxies. It exposes a SOCKS5 (or HTTP CONNECT) service and forwards incoming requests to proxies or ch…
  ☆86Updated last week
• Warxim / deluder
  Deluder is a tool for intercepting traffic of proxy unaware applications. Currently, Deluder supports OpenSSL, GnuTLS, SChannel, WinSock …
  ☆185Updated 6 months ago