bouheki is KRSI(eBPF+LSM) based Linux security auditing tool.
☆92Sep 21, 2025Updated 5 months ago
Alternatives and similar repositories for bouheki
Users that are interested in bouheki are comparing it to the libraries listed below
Sorting:
- Waffle is a library for integrating a Web Application Firewall (WAF) into Go applications.☆18Feb 26, 2026Updated last week
- ☆28Nov 24, 2021Updated 4 years ago
- ☆15Jan 30, 2025Updated last year
- ☆17Mar 22, 2019Updated 6 years ago
- Linux Kernel Runtime Integrity with eBPF☆184Nov 23, 2023Updated 2 years ago
- ☆154Feb 17, 2026Updated 2 weeks ago
- Kubernetes CNI plugin and network load-balancer by Rust☆16Jun 26, 2024Updated last year
- VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF☆168Sep 7, 2024Updated last year
- [Deplicated] Now we have more sophisticated (and compact) implementation in ipftrace2 repository. Please check it as well.☆58May 25, 2020Updated 5 years ago
- 手を動かせばできるLLVMバックエンド チュートリアル（WIP）☆43May 12, 2022Updated 3 years ago
- GitHub query & extracter (Enterprise ready)☆19Sep 30, 2025Updated 5 months ago
- tcpriv: Access Control Architecture Separating Privilege Transparently via TCP Connection Based on Process Information☆17Aug 26, 2020Updated 5 years ago
- silence negligible CVE alerts using LLM☆65Updated this week
- Trivy based vulnerability management service☆58Feb 25, 2026Updated last week
- Analyze stack amount for each goroutine☆19Jul 11, 2019Updated 6 years ago
- 🔖 Git plugin for Semantic Versioning☆23Oct 4, 2025Updated 5 months ago
- a new cfi mechanism☆33Sep 23, 2021Updated 4 years ago
- A process-based communication control system for containers.☆17Feb 10, 2022Updated 4 years ago
- LSM BPF module to block pwnkit (CVE-2021-4034) like exploits☆21Feb 17, 2022Updated 4 years ago
- ENC28J60 Linux network driver written in Rust.☆21Apr 28, 2023Updated 2 years ago
- Yet Another OpenStack API wrapper☆35Sep 1, 2023Updated 2 years ago
- A 64 bit OS☆10Nov 12, 2025Updated 3 months ago
- BPFContain is a container security daemon for GNU/Linux leveraging the power and safety of eBPF and Rust.☆59Jun 30, 2022Updated 3 years ago
- A thin-hypervisor that runs on aarch64 CPUs.☆103Feb 22, 2026Updated last week
- Making containers more secure with eBPF and Linux Security Modules (LSM)☆231Jun 2, 2024Updated last year
- system call hook for Linux☆624Jan 6, 2025Updated last year
- Kubernetes CTF☆43Sep 21, 2025Updated 5 months ago
- Fork from git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git (unstable and force pushed!)☆22Jun 15, 2023Updated 2 years ago
- Shell wrapper with keylogger (local log or syslog)☆13Nov 1, 2017Updated 8 years ago
- LLVM-based ROP obfuscated compiler☆13Mar 24, 2022Updated 3 years ago
- ☆12Dec 8, 2024Updated last year
- An adaptation of timwhitez's proxycall that uses kernelbase.dll!Beep.☆16Nov 1, 2023Updated 2 years ago
- GitHub notification manager☆23Updated this week
- A packet oriented Linux kernel function call tracer☆408Apr 14, 2024Updated last year
- This tool set can generate SECCOMP profiles for Docker images. It mainly relies on static analysis, making its results more reliable than…☆70May 3, 2022Updated 3 years ago
- Dataset from Linux Raspian VMs and devices with auditd logs capturing various container escape and attacks.☆15Jul 30, 2022Updated 3 years ago
- ☆11Mar 18, 2019Updated 6 years ago
- iip: an integratable TCP/IP stack☆95Dec 14, 2025Updated 2 months ago
- A collection of projects demonstrating various commandline cloaking techniques on Linux☆61Aug 4, 2022Updated 3 years ago