Alternatives and similar repositories for bpfhacks

Users that are interested in bpfhacks are comparing it to the libraries listed below

• hackerschoice / memexec
  Circumventing "noexec" mount flag to execute arbitrary linux binaries by ptrace-less process injection
  ☆135Updated 5 months ago
• eeriedusk / nysm
  nysm is a stealth post-exploitation container.
  ☆263Updated 4 months ago
• hardenedlinux / userland-exec
  Userland exec PoC to be used as attack vector technique
  ☆94Updated 3 weeks ago
• blasty / JiaTansSSHAgent
  ☆135Updated last year
• hackerschoice / ttyinject
  Get root via TTY / TIOCSTI stuffing
  ☆76Updated 6 months ago
• BishopFox / asminject
  Heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly (or precompiled binary) payloads directly into x86…
  ☆142Updated 3 years ago
• MatheuZSecurity / detect-lkm-rootkit-cheatsheet
  Cheat sheet to detect and remove linux kernel rootkit
  ☆74Updated 10 months ago
• armosec / curing
  io_uring based rootkit
  ☆243Updated 6 months ago
• lockness-Ko / xz-vulnerable-honeypot
  An ssh honeypot with the XZ backdoor. CVE-2024-3094
  ☆144Updated last year
• lexfo / sshimpanzee
  SSHD Based implant supporting tunneling mecanisms to reach the C2 (DNS, ICMP, HTTP Encapsulation, HTTP/Socks Proxies, UDP...)
  ☆279Updated 8 months ago
• DualHorizon / blackpill
  A Linux kernel rootkit in Rust using a custom made type-2 hypervisor, eBPF XDP and TC programs
  ☆331Updated 4 months ago
• mephistolist / tito
  In-Memory Rootkit For Linux and BSD
  ☆86Updated 3 months ago
• SkyperTHC / curlshell
  reverse shell using curl
  ☆218Updated 8 months ago
• kpcyrd / sh4d0wup
  Signing-key abuse and update exploitation framework
  ☆131Updated 5 months ago
• thalium / rkchk
  Rust Linux Kernel Module designed for LKM rootkit detection
  ☆53Updated 8 months ago
• skyler-ferrante / CVE-2024-28085
  WallEscape vulnerability in util-linux
  ☆52Updated last year
• mav8557 / Father
  LD_PRELOAD rootkit
  ☆138Updated last year
• anvilsecure / ulexecve
  ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries…
  ☆196Updated last year
• OfriOuzan / HardeningMeter
  HardeningMeter is an open-source Python tool carefully designed to comprehensively assess the security hardening of binaries and systems.
  ☆65Updated 11 months ago
• recontech404 / Kairos
  Open Source eBPF Malware Analysis Framework
  ☆53Updated last year
• Hakumarachi / Bropper
  An automatic Blind ROP exploitation tool
  ☆205Updated 2 years ago
• Velocidex / Linpmem
  Linpmem is a linux memory acquisition tool
  ☆94Updated 4 months ago
• b1ack0wl / vulnerability-write-ups
  This repo contains write ups of vulnerabilities I've found and exploits I've publicly developed.
  ☆147Updated 2 years ago
• AmberWolfCyber / NachoVPN
  A delicious, but malicious SSL-VPN server 🌮
  ☆252Updated last month
• Rizer0 / Ropdump
  ROPDump is a command-line tool designed to analyze binary executables for potential Return-Oriented Programming (ROP) gadgets, buffer ove…
  ☆87Updated last year
• 0xor0ne / recmd
  Remote Command executor
  ☆80Updated 2 years ago
• MatheuZSecurity / Rootkit
  Collection of codes focused on Linux rootkits
  ☆183Updated 3 weeks ago
• reveng007 / reveng_rtkit
  Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypa…
  ☆259Updated 2 years ago
• hardenedvault / ved-ebpf
  VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF
  ☆167Updated last year
• MatheuZSecurity / ElfDoor-gcc
  ElfDoor-gcc is an LD_PRELOAD that hijacks gcc to inject malicious code into binaries during linking, without touching the source code.
  ☆130Updated 7 months ago