landhb / DrawBridge
Layer 4 Single Packet Authentication Linux kernel module utilizing Netfilter hooks and kernel supported Berkeley Packet Filters (BPF)
☆114Updated last year
Alternatives and similar repositories for DrawBridge:
Users that are interested in DrawBridge are comparing it to the libraries listed below
- A ptrace POC by hooking SSH to reveal provided passwords☆181Updated 7 years ago
- ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits☆127Updated last year
- Rootkit Detector for UNIX☆62Updated last year
- E2E encryption for multi-hop tty sessions or portshells + TCP/UDP port forward☆120Updated 3 months ago
- Linux 4.9 Loadable Kernel Module to hide processes from system utilities☆67Updated 6 years ago
- Whitelisting LD_PRELOAD libraries using LD_AUDIT☆61Updated 3 years ago
- monitor and protect SSH sessions with eBPF☆66Updated 3 years ago
- Small tool to run ELF binaries from memory with a given process name☆159Updated 3 years ago
- eBPF - extended Berkeley Packet Filter tooling☆122Updated 2 years ago
- collection of verified Linux kernel exploits☆186Updated 4 years ago
- The first Linux hooking framework to allow merging two binary files into one!☆94Updated 4 years ago
- A LKM rootkit for most newer kernel versions.☆172Updated 7 years ago
- This is a kernel module invoked reverse shell proof of concept.☆72Updated 5 years ago
- Linux kernel XFRM UAF poc (3.x - 5.x kernels)☆133Updated 4 years ago
- Fully functional but simplified Linux Kernel Module (LKM) Rootkit for educational purposes☆60Updated 5 years ago
- Kernel-Mode Rootkit Hunter☆363Updated 3 years ago
- ICMP and DNS tunneling via IPv4 and IPv6☆202Updated last year
- Chiron - An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.☆207Updated 6 years ago
- LKRG bypass methods☆70Updated 5 years ago
- Vault Exploit Defense☆124Updated 5 months ago
- Tool to examine the behaviour of setuid binaries under constrained limits.☆62Updated 3 years ago
- SSH Tunnelling in "RAW mode", via STDIN/OUT without using forwarding channels☆109Updated 6 years ago
- A keystroke / terminal logger for Linux.☆214Updated 7 months ago
- Zombie Ant Farm: Primitives and Offensive Tooling for Linux EDR evasion.☆224Updated 5 years ago
- A Golang Reverse Shell w/ a Tmux-driven psuedo-C2 Interface☆86Updated 2 months ago
- bdvl☆112Updated 2 years ago
- ☆92Updated 7 years ago
- A server and client implementation to demonstrate and test ALG abuse and perform the NAT slipstream attack described https://www.samy.pl/…☆42Updated 4 years ago
- SLAE Assignments☆39Updated last year
- (Linux Kernel) Stack Monitoring Tool☆43Updated 3 years ago