pathtofile/bpf-hookdetect external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

pathtofile/bpf-hookdetect

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/pathtofile/bpf-hookdetect)

Close

pathtofile / bpf-hookdetectView on GitHubMore

• External links
• Readme badge

Dectect syscall hooking using eBPF

☆170Apr 28, 2023Updated 3 years ago

Alternatives and similar repositories for bpf-hookdetect

Users that are interested in bpf-hookdetect are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• linuxthor / rkbreaker

  View on GitHub
  Rootkit breaker - experimental Linux anti-rootkit tool based on kprobes
  ☆12Sep 30, 2020Updated 6 years ago
• CDuPlooy / arm64tracer

  View on GitHub
  ☆15Jun 24, 2021Updated 5 years ago
• lumontec / lsmtrace

  View on GitHub
  Trace deep kernel events through eBPF and lsm hooks
  ☆43Feb 9, 2021Updated 5 years ago
• citronneur / blindssl

  View on GitHub
  Disable SSL certificate verification for all binaries that use libssl
  ☆49Jul 15, 2022Updated 4 years ago
• arceos-hypervisor / arm_vcpu

  View on GitHub
  vCpu for ARM: virtualization support under aarch64 architecture
  ☆16Mar 31, 2026Updated 6 months ago
• Deploy on Railway without the complexity - Free Credits Offer • Ad
  Connect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
• 0xjacklove / xflower

  View on GitHub
  deobfuscation BR
  ☆56Mar 4, 2024Updated 2 years ago
• redcanaryco / redcanary-ebpf-sensor

  View on GitHub
  Red Canary's eBPF Sensor
  ☆116Jun 26, 2026Updated 3 months ago
• linuxthor / rkspotter

  View on GitHub
  Rootkit spotter - experimental Linux rootkit finder LKM
  ☆31Oct 11, 2020Updated 6 years ago
• linux-lock / bpflock

  View on GitHub
  bpflock - eBPF driven security for locking and auditing Linux machines
  ☆157Feb 16, 2022Updated 4 years ago
• carloslack / KoviD

  View on GitHub
  Red-Team LKM
  ☆660Updated this week
• gojue / ehids-agent

  View on GitHub
  A Linux Host-based Intrusion Detection System based on eBPF.
  ☆458Dec 20, 2023Updated 2 years ago
• pathtofile / bad-bpf

  View on GitHub
  A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29
  ☆702Jul 7, 2024Updated 2 years ago
• tiann / ebpf-jnitrace

  View on GitHub
  Trace jni calls with eBPF on Android
  ☆24Jun 21, 2022Updated 4 years ago
• NinnOgTonic / Out-of-Sight-Out-of-Mind-Rootkit

  View on GitHub
  Rootkit
  ☆24Nov 15, 2014Updated 11 years ago
• Serverless GPU API endpoints on Runpod - Get Bonus Credits • Ad
  Skip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
• SsageParuders / Android_SVC_Edu

  View on GitHub
  A Project for people to study android svc.
  ☆28Aug 12, 2022Updated 4 years ago
• h3xduck / TripleCross

  View on GitHub
  A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
  ☆1,984Apr 7, 2024Updated 2 years ago
• krisnova / boopkit

  View on GitHub
  Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.
  ☆1,681Oct 19, 2023Updated 2 years ago
• Gui774ume / ebpfkit

  View on GitHub
  ebpfkit is a rootkit powered by eBPF
  ☆862Feb 28, 2023Updated 3 years ago
• lockedbyte / so_loader

  View on GitHub
  In-memory ELF shared library loading
  ☆45Dec 18, 2022Updated 3 years ago
• m0nad / Diamorphine

  View on GitHub
  LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)
  ☆2,470Apr 27, 2026Updated 5 months ago
• nullhook / ollvm-14.x

  View on GitHub
  WIP
  ☆15Jan 13, 2022Updated 4 years ago
• gojue / ebpfmanager

  View on GitHub
  A golang ebpf libary based on cilium/ebpf and datadog/ebpf.
  ☆350Sep 8, 2026Updated last month
• kiosk404 / openssl_tracer

  View on GitHub
  openssl tracer using eBPF
  ☆15Jan 4, 2026Updated 9 months ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• wuyr / agent-injector-for-android

  View on GitHub
  基于JVMTI实现的Android端动态代码注入工具
  ☆42May 10, 2024Updated 2 years ago
• BassamGraini / CVE-2022-2588

  View on GitHub
  ☆12Dec 16, 2022Updated 3 years ago
• 5ec1cff / IntentTracker

  View on GitHub
  ☆30May 13, 2025Updated last year
• gojue / rootkit-sample

  View on GitHub
  ☆48Mar 19, 2022Updated 4 years ago
• gagalin95 / FART_repairdex

  View on GitHub
  修复通过FART dump下来的dex
  ☆28Aug 1, 2020Updated 6 years ago
• 3intermute / arm64_silent_syscall_hook

  View on GitHub
  silent syscall hooking without modifying sys_call_table/handlers via patching exception handler
  ☆154Apr 22, 2024Updated 2 years ago
• AkaAny / proc_injector

  View on GitHub
  Inject remote process without using ptrace on linux based system
  ☆19Apr 26, 2022Updated 4 years ago
• huaerxiela / frida-script

  View on GitHub
  ☆59Nov 10, 2021Updated 4 years ago
• elastic / ebpf

  View on GitHub
  ☆87Updated this week
• Wordpress hosting with auto-scaling - Free Trial Offer • Ad
  Fully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
• FrenchYeti / interruptor

  View on GitHub
  Human-friendly cross-platform system call tracing and hooking library based on Frida's Stalker
  ☆360Sep 23, 2026Updated 2 weeks ago
• SsageParuders / Android_Anti-Hcak_Inotify

  View on GitHub
  Inotify监听测试
  ☆36Apr 17, 2022Updated 4 years ago
• tr3ee / CVE-2022-23222

  View on GitHub
  CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation
  ☆570Jun 7, 2022Updated 4 years ago
• VerSprite / engage

  View on GitHub
  Tools and Materials for the Frida Engage Blog Series
  ☆46Mar 28, 2018Updated 8 years ago
• reveny / Android-Library-Remap-Hide

  View on GitHub
  Remap a library to avoid detection
  ☆139Feb 1, 2024Updated 2 years ago
• KKGanguly / DataCentricFuzzJS

  View on GitHub
  ☆17May 26, 2026Updated 4 months ago
• xcellerator / linux_kernel_hacking

  View on GitHub
  Linux Kernel Hacking
  ☆776Apr 10, 2024Updated 2 years ago