Dectect syscall hooking using eBPF
☆170Apr 28, 2023Updated 3 years ago
Alternatives and similar repositories for bpf-hookdetect
Users that are interested in bpf-hookdetect are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆15Jun 24, 2021Updated 5 years ago
- Trace deep kernel events through eBPF and lsm hooks☆43Feb 9, 2021Updated 5 years ago
- Disable SSL certificate verification for all binaries that use libssl☆49Jul 15, 2022Updated 4 years ago
- A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29☆711Jul 7, 2024Updated 2 years ago
- Rootkit☆24Nov 15, 2014Updated 11 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Red Canary's eBPF Sensor☆117Jun 26, 2026Updated 4 months ago
- A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.☆1,992Apr 7, 2024Updated 2 years ago
- deobfuscation BR☆55Mar 4, 2024Updated 2 years ago
- Red-Team LKM☆663Oct 18, 2026Updated 2 weeks ago
- Trace jni calls with eBPF on Android☆24Jun 21, 2022Updated 4 years ago
- vCpu for ARM: virtualization support under aarch64 architecture☆16Mar 31, 2026Updated 7 months ago
- bpflock - eBPF driven security for locking and auditing Linux machines☆157Feb 16, 2022Updated 4 years ago
- Rootkit spotter - experimental Linux rootkit finder LKM☆31Oct 11, 2020Updated 6 years ago
- ebpfkit is a rootkit powered by eBPF☆866Feb 28, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A Project for people to study android svc.☆28Aug 12, 2022Updated 4 years ago
- A Linux Host-based Intrusion Detection System based on eBPF.☆459Dec 20, 2023Updated 2 years ago
- Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.☆1,684Oct 19, 2023Updated 3 years ago
- Inject remote process without using ptrace on linux based system☆19Apr 26, 2022Updated 4 years ago
- LKM rootkit for Linux Kernels 2.6.x-6.x (x86/x86_64 and ARM/64)☆2,488Updated this week
- Analyze APK file for taint analysis targeting Javascript Interface using AppShark☆13Apr 3, 2024Updated 2 years ago
- ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits☆145Feb 28, 2023Updated 3 years ago
- Detection of rootkit file hiding activities through analysis of shifts in kernel function execution times.☆32Aug 21, 2026Updated 2 months ago
- Linux Kernel Runtime Integrity with eBPF☆186Nov 23, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A golang ebpf libary based on cilium/ebpf and datadog/ebpf.☆351Sep 8, 2026Updated last month
- Linux Kernel Hacking☆778Apr 10, 2024Updated 2 years ago
- In-memory ELF shared library loading☆45Dec 18, 2022Updated 3 years ago
- Inotify监听测试☆36Apr 17, 2022Updated 4 years ago
- openssl tracer using eBPF☆15Jan 4, 2026Updated 9 months ago
- VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF☆173Sep 7, 2024Updated 2 years ago
- The LKM rootkit working in Linux Kernels 2.6.x/3.x/4.x/5.x☆139Aug 8, 2023Updated 3 years ago
- IDA Python Script for anti ollvm-arm☆28Sep 12, 2021Updated 5 years ago
- Human-friendly cross-platform system call tracing and hooking library based on Frida's Stalker☆361Sep 23, 2026Updated last month
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- WIP☆15Jan 13, 2022Updated 4 years ago
- ☆30May 13, 2025Updated last year
- Hades is a Host-Based Intrusion Detection System based on eBPF(mainly)☆309May 24, 2026Updated 5 months ago
- 基于JVMTI实现的Android端动态代码注入工具☆42May 10, 2024Updated 2 years ago
- ☆12Dec 16, 2022Updated 3 years ago
- 修复通过FART dump下来的dex☆28Aug 1, 2020Updated 6 years ago
- Linux EDR written in Golang and based on eBPF.☆242May 24, 2022Updated 4 years ago