Alternatives and similar repositories for bpf-pipesnoop

Users that are interested in bpf-pipesnoop are comparing it to the libraries listed below

• trailofbits / ebpfpub
  ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.
  ☆117Updated 2 years ago
• citronneur / blindssl
  Disable SSL certificate verification for all binaries that use libssl
  ☆49Updated 3 years ago
• grimm-co / linuxklee
  Pulled out Linux kernel code to run in userland so they could be targeted by AFL and KLEE
  ☆20Updated 5 years ago
• perceptionpoint / suprotect
  Changing memory protection in an arbitrary process
  ☆47Updated 6 years ago
• redcanaryco / ebpfmon
  ☆89Updated last year
• kkamagui / alcatraz
  Alcatraz project for Black Hat USA 2021
  ☆78Updated 3 years ago
• JacobPimental / r2-gohelper
  gopclntab finder and analyzer for Radare2
  ☆20Updated 4 years ago
• GJDuck / e9syscall
  A system call interception tool
  ☆57Updated 7 months ago
• ivision-research / gostringsr2
  Find strings in Go binaries
  ☆53Updated 5 years ago
• milabs / stamina
  (Linux Kernel) Stack Monitoring Tool
  ☆45Updated 3 years ago
• stealth / injectso
  ELF DSO injector
  ☆65Updated last month
• elfmaster / dt_infect
  ELF Shared library injector using DT_NEEDED precedence infection. Acts as a permanent LD_PRELOAD
  ☆110Updated 5 years ago
• milabs / lkrg-bypass
  LKRG bypass methods
  ☆72Updated 5 years ago
• nccgroup / libptmalloc
  Heap analysis tooling for ptmalloc
  ☆45Updated 3 years ago
• goretk / pygore
  pyGoRE - Python library for analyzing Go binaries
  ☆64Updated 3 years ago
• nccgroup / insject
  insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.
  ☆50Updated 3 years ago
• KVM-VMI / nitro
  ☆47Updated 6 years ago
• brainsmoke / ptrace-burrito
  a friendly wrapper around ptrace
  ☆132Updated 3 years ago
• nccgroup / xendbg
  A feature-complete reference implementation of a modern Xen VMI debugger. ARCHIVED: Development continues at https://github.com/spencermi…
  ☆78Updated 4 years ago
• ainfosec / ecr_toolkit
  ☆28Updated 6 years ago
• Gui774ume / krie
  Linux Kernel Runtime Integrity with eBPF
  ☆180Updated last year
• trailofbits / ebpf-common
  Various utilities useful for developers writing BPF tools
  ☆30Updated 2 years ago
• hardenedvault / ved
  Vault Exploit Defense
  ☆128Updated 10 months ago
• pathtofile / bpf-hookdetect
  Dectect syscall hooking using eBPF
  ☆159Updated 2 years ago
• ulexec / ElfLocker
  PoC multi-layer protector for ELF32 x86 binaries
  ☆11Updated 3 years ago
• lumontec / lsmtrace
  Trace deep kernel events through eBPF and lsm hooks
  ☆37Updated 4 years ago
• tianweiz07 / Cloud_Integrity
  Using LibVMI to detect malware
  ☆31Updated 3 years ago
• trailofbits / linuxevents
  A sample PoC for container-aware exec events for osquery
  ☆24Updated last year
• redplait / lkcd
  ugly code to check linux kernel memory and dump some internal structures
  ☆47Updated 8 months ago
• saaph / eBPF_processor
  An IDA processor for eBPF bytecode
  ☆34Updated 8 years ago