Alternatives and similar repositories for capsule8

Users that are interested in capsule8 are comparing it to the libraries listed below

• Gui774ume / ebpfkit-monitor
  ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
  ☆139Updated 2 years ago
• mole-ids / mole
  Yara powered NIDS with high speed packet capture powered by PF_RING
  ☆69Updated last year
• aquasecurity / vuln-list-update
  ☆191Updated last week
• Gui774ume / krie
  Linux Kernel Runtime Integrity with eBPF
  ☆184Updated 2 years ago
• sourque / louis
  Linux EDR written in Golang and based on eBPF.
  ☆244Updated 3 years ago
• knqyf263 / dnspooq
  DNSpooq - dnsmasq cache poisoning (CVE-2020-25686, CVE-2020-25684, CVE-2020-25685)
  ☆100Updated 5 years ago
• tdwyer / CVE-2020-8559
  This is a PoC exploit for CVE-2020-8559 Kubernetes Vulnerability
  ☆54Updated 5 years ago
• Cisco-Talos / Re2Pcap
  ☆60Updated last year
• trailofbits / ebpfpub
  ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.
  ☆119Updated last month
• hardenedvault / ved
  Vault Exploit Defense
  ☆127Updated last year
• lumontec / lsmtrace
  Trace deep kernel events through eBPF and lsm hooks
  ☆42Updated 4 years ago
• pathtofile / bpf-pipesnoop
  Example program using eBPF to log data being based in using shell pipes
  ☆41Updated 4 years ago
• vmware-archive / cbsensor-linux-bpf
  Linux endpoint events for BPF enabled systems
  ☆24Updated 3 years ago
• lixingchen12138 / libvmi-volatility-master
  虚拟机带外内存监控
  ☆14Updated 7 years ago
• mempodippy / detect_preload
  Small C application designed to detect LD_PRELOAD malware via the libdl library functions.
  ☆56Updated 9 years ago
• bgeesaman / subpath-exploit
  Writeup of CVE-2017-1002101 with sample "exploit"/escape
  ☆35Updated 7 years ago
• p- / socket-connect-bpf
  Get live information about applications that make network requests (based on eBPF)
  ☆53Updated 4 months ago
• hardenedlinux / hardenedlinux-zeek-scripts
  ☆39Updated 2 years ago
• danielsagi / kube-pod-escape
  Kubernetes POC for utilizing write mount to /var/log for getting a root on the host
  ☆99Updated 5 years ago
• pathtofile / commandline_cloaking
  A collection of projects demonstrating various commandline cloaking techniques on Linux
  ☆59Updated 3 years ago
• chriskaliX / Hades
  Hades is a Host-Based Intrusion Detection System based on eBPF(mainly)
  ☆305Updated last year
• redcanaryco / redcanary-ebpf-sensor
  Red Canary's eBPF Sensor
  ☆113Updated 7 months ago
• nbulischeck / tyton
  Kernel-Mode Rootkit Hunter
  ☆376Updated 4 years ago
• knqyf263 / CVE-2020-8617
  PoC for CVE-2020-8617 (BIND)
  ☆45Updated 5 years ago
• Pray3r / cloud-native-security
  Resources for CloudNative security research
  ☆32Updated 4 years ago
• neko-neko / utmpdump
  utmp file dumper, written in golang. Output to json or tsv or csv.
  ☆34Updated 2 years ago
• xxg1413 / docker-security
  docker vulnerability analysis
  ☆50Updated 9 years ago
• andrewstucki / bpf-lsm
  Example BPF program with LSM hooks
  ☆35Updated 4 years ago
• 0xjiayu / DDGBotnetTracker
  Source code of DDG Mining Botnet tracker
  ☆59Updated 5 years ago
• linux-lock / bpflock
  bpflock - eBPF driven security for locking and auditing Linux machines
  ☆151Updated 3 years ago