Alternatives and similar repositories for DrawBridge

Users that are interested in DrawBridge are comparing it to the libraries listed below

• XiphosResearch / netelf
  Run executables from memory, over the network, on Windows, Linux, OpenVMS... routers... spaceships... toasters etc.
  ☆281Updated 8 years ago
• nccgroup / ebpf
  eBPF - extended Berkeley Packet Filter tooling
  ☆131Updated 3 years ago
• ForensicITGuy / libpreloadvaccine
  Whitelisting LD_PRELOAD libraries using LD_AUDIT
  ☆63Updated 4 years ago
• emptymonkey / shelljack
  A keystroke / terminal logger for Linux.
  ☆217Updated last year
• stealth / crash
  crypted admin shell: SSH-like strong crypto remote admin shell for Linux, BSD, Android, Solaris and OSX
  ☆211Updated 7 months ago
• stealth / fraud-bridge
  ICMP and DNS tunneling via IPv4 and IPv6
  ☆224Updated 8 months ago
• pathtofile / bpf-pipesnoop
  Example program using eBPF to log data being based in using shell pipes
  ☆41Updated 4 years ago
• Iansus / hideproc-lkm
  Linux 4.9 Loadable Kernel Module to hide processes from system utilities
  ☆67Updated 7 years ago
• stealth / psc
  E2E encryption for multi-hop tty sessions or portshells + TCP/UDP port forward
  ☆131Updated last year
• milabs / stamina
  (Linux Kernel) Stack Monitoring Tool
  ☆48Updated 3 years ago
• guardicore / IPCDump
  ☆246Updated 4 years ago
• QuokkaLight / rkduck
  Linux v4.x.x Rootkit
  ☆92Updated last year
• geyslan / SLAE
  SLAE Assignments
  ☆39Updated last year
• tsarpaul / GLORYHook
  The first Linux hooking framework to allow merging two binary files into one!
  ☆97Updated 7 months ago
• trailofbits / ebpfpub
  ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.
  ☆118Updated this week
• therealdreg / lsrootkit
  Rootkit Detector for UNIX
  ☆61Updated 2 years ago
• Gui774ume / ssh-probe
  monitor and protect SSH sessions with eBPF
  ☆71Updated 4 years ago
• elfmaster / saruman
  ELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection)
  ☆138Updated 7 years ago
• chokepoint / CryptHook
  TCP/UDP symmetric encryption tunnel wrapper
  ☆122Updated 5 years ago
• taviso / scanlimits
  Tool to examine the behaviour of setuid binaries under constrained limits.
  ☆63Updated 4 years ago
• utoni / potd
  A high scalable low to medium interactive SSH/TCP honeypot using Linux Namespaces, capabilities, seccomp, cgroups designed for OpenWrt an…
  ☆31Updated 5 years ago
• therealdreg / enyelkm
  LKM rootkit for Linux x86 with the 2.6 kernel. It inserts salts inside system_call and sysenter_entry.
  ☆87Updated 2 years ago
• isdrupter / busybotnet
  Security For Embedeed Systems - One Bin to Rule Them All.
  ☆157Updated 6 years ago
• guitmz / memrun
  Small tool to run ELF binaries from memory with a given process name
  ☆170Updated 4 years ago
• netspooky / pdiff
  Binary Protocol Differ
  ☆118Updated 5 years ago
• chokepoint / Jynx2
  JynxKit2 is an LD_PRELOAD userland rootkit based on the original JynxKit. The backdoor has been replaced with an "accept()" system hook.
  ☆182Updated 13 years ago
• nbulischeck / tyton
  Kernel-Mode Rootkit Hunter
  ☆373Updated 4 years ago
• bcdannyboy / Research
  General Research Repository - Only updated when I feel like it
  ☆28Updated last year
• spiderpig1297 / kprochide
  kprochide is an LKM for hiding processes from the userland. The module is able to hide multiple processes and is able to dynamically rece…
  ☆22Updated 5 years ago
• scumjr / the-sea-watcher
  Implementation of the SMM rootkit "The Watcher"
  ☆130Updated 3 years ago