Alternatives and similar repositories for bpf-pipesnoop

Users that are interested in bpf-pipesnoop are comparing it to the libraries listed below

• trailofbits / ebpfpub
  ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.
  ☆117Updated last week
• kkamagui / alcatraz
  Alcatraz project for Black Hat USA 2021
  ☆78Updated 4 years ago
• citronneur / blindssl
  Disable SSL certificate verification for all binaries that use libssl
  ☆48Updated 3 years ago
• pathtofile / bpf-hookdetect
  Dectect syscall hooking using eBPF
  ☆165Updated 2 years ago
• redcanaryco / ebpfmon
  ☆89Updated last year
• grimm-co / linuxklee
  Pulled out Linux kernel code to run in userland so they could be targeted by AFL and KLEE
  ☆20Updated 5 years ago
• nccgroup / ebpf
  eBPF - extended Berkeley Packet Filter tooling
  ☆131Updated 3 years ago
• milabs / lkrg-bypass
  LKRG bypass methods
  ☆73Updated 5 years ago
• JacobPimental / r2-gohelper
  gopclntab finder and analyzer for Radare2
  ☆21Updated 5 years ago
• perceptionpoint / suprotect
  Changing memory protection in an arbitrary process
  ☆47Updated 7 years ago
• hardenedvault / ved
  Vault Exploit Defense
  ☆127Updated last year
• nccgroup / insject
  insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.
  ☆50Updated 3 years ago
• milabs / stamina
  (Linux Kernel) Stack Monitoring Tool
  ☆48Updated 3 years ago
• nccgroup / libptmalloc
  Heap analysis tooling for ptmalloc
  ☆46Updated 3 years ago
• GJDuck / e9syscall
  A system call interception tool
  ☆58Updated 11 months ago
• Gui774ume / krie
  Linux Kernel Runtime Integrity with eBPF
  ☆183Updated 2 years ago
• ivision-research / gostringsr2
  Find strings in Go binaries
  ☆54Updated 6 years ago
• rexguowork / phantom-attack
  POC for Phantom Attack
  ☆88Updated 3 years ago
• goretk / pygore
  pyGoRE - Python library for analyzing Go binaries
  ☆66Updated 3 years ago
• stealth / injectso
  ELF DSO injector
  ☆71Updated 5 months ago
• etke / checksec.rs
  Fast multi-platform (ELF/PE/MachO) binary checksec written in Rust.
  ☆119Updated last year
• airbus-cert / dirtypipe-ebpf_detection
  An eBPF detection program for CVE-2022-0847
  ☆28Updated 3 years ago
• trailofbits / ebpf-common
  Various utilities useful for developers writing BPF tools
  ☆30Updated 2 years ago
• elfmaster / dt_infect
  ELF Shared library injector using DT_NEEDED precedence infection. Acts as a permanent LD_PRELOAD
  ☆111Updated 5 years ago
• tathanhdinh / keystone-rs
  Rust binding for Keystone assembler framework
  ☆11Updated 6 years ago
• nccgroup / xendbg
  A feature-complete reference implementation of a modern Xen VMI debugger. ARCHIVED: Development continues at https://github.com/spencermi…
  ☆78Updated 5 years ago
• brainsmoke / ptrace-burrito
  a friendly wrapper around ptrace
  ☆133Updated 3 years ago
• quarkslab / peetch
  An eBPF playground
  ☆209Updated last year
• saaph / eBPF_processor
  An IDA processor for eBPF bytecode
  ☆34Updated 8 years ago
• lumontec / lsmtrace
  Trace deep kernel events through eBPF and lsm hooks
  ☆42Updated 4 years ago