Alternatives and similar repositories for capsule8:

Users that are interested in capsule8 are comparing it to the libraries listed below

• mole-ids / mole
  Yara powered NIDS with high speed packet capture powered by PF_RING
  ☆69Updated 10 months ago
• Gui774ume / ebpfkit-monitor
  ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
  ☆127Updated 2 years ago
• pathtofile / commandline_cloaking
  A collection of projects demonstrating various commandline cloaking techniques on Linux
  ☆57Updated 2 years ago
• ossec / ossec-rules
  A repository for OSSEC rules and decoders
  ☆54Updated last year
• airbus-cert / dirtypipe-ebpf_detection
  An eBPF detection program for CVE-2022-0847
  ☆28Updated 2 years ago
• pathtofile / bpf-pipesnoop
  Example program using eBPF to log data being based in using shell pipes
  ☆41Updated 4 years ago
• corelight / zeek-quic
  Bro analyzer that detects Google's QUIC protocol
  ☆10Updated 4 years ago
• jheise / yarascanner
  Golang based web service to scan files with yara rules
  ☆27Updated 7 years ago
• eclypsium / Publications
  Slides, papers, etc
  ☆31Updated 11 months ago
• redcanaryco / redcanary-ebpf-sensor
  Red Canary's eBPF Sensor
  ☆101Updated 8 months ago
• avast / yari
  YARI is an interactive debugger for YARA Language.
  ☆87Updated 2 months ago
• Cisco-Talos / Re2Pcap
  ☆54Updated 8 months ago
• trailofbits / ebpfpub
  ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.
  ☆118Updated last year
• hanj4096 / wukong
  A LKM rootkit for Linux kernel 2.6.x, 3.x and 4.x
  ☆43Updated 8 years ago
• teler-sh / teler-resources
  teler Resource Collections
  ☆36Updated this week
• rsabir / bro-dsniff
  A dsniff project using bro
  ☆10Updated 9 years ago
• knqyf263 / CVE-2020-10749
  CVE-2020-10749 PoC (Kubernetes MitM attacks via IPv6 rogue router advertisements)
  ☆25Updated 4 years ago
• attwad / nessie
  Tenable Nessus 6 API client in Go
  ☆18Updated 4 years ago
• VirusTotal / gyp
  gyp: A pure Go YARA parser
  ☆105Updated last year
• Pray3r / cloud-native-security
  Resources for CloudNative security research
  ☆32Updated 3 years ago
• xfhg / intercept
  INTERCEPT / Policy as Code Auditing & Compliance
  ☆83Updated last month
• ByteSecLabs / ja3-ja3s-combo
  High fidelity JA3 & JA3S combinations for known botnets and alike
  ☆11Updated 6 years ago
• knqyf263 / remic
  Vulnerability Scanner for Detecting Publicly Disclosed Vulnerabilities in Application Dependencies
  ☆23Updated 5 years ago
• YJesus / Unhide-NG
  Next generation !
  ☆65Updated 4 years ago
• CommunityHoneyNetwork / rdphoney
  Basic RDP honeypot script
  ☆30Updated 2 years ago
• zom3y3 / ssdc
  ssdeep cluster analysis for malware files
  ☆31Updated 4 years ago
• Gui774ume / krie
  Linux Kernel Runtime Integrity with eBPF
  ☆172Updated last year
• botherder / go-autoruns
  Collect autorun records from running system
  ☆61Updated 3 years ago
• activeshadow / go-atomicredteam
  go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https…
  ☆49Updated 2 years ago
• Betep0k / CVE-2021-25741
  Exploit for CVE-2021-25741 vulnerability
  ☆28Updated 3 years ago