Alternatives and similar repositories for ebpf-common:

Users that are interested in ebpf-common are comparing it to the libraries listed below

• trailofbits / ebpfpub
  ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.
  ☆118Updated last year
• trailofbits / bpf_tutorials_code
  This repository contains the companion code from the "All your tracing are belong to BPF" blog posts
  ☆18Updated last year
• trailofbits / btfparse
  A C++ library that parses debug information encoded in BTF format
  ☆25Updated last year
• trailofbits / ebpfault
  A BPF-based syscall fault injector
  ☆101Updated last year
• pathtofile / bpf-pipesnoop
  Example program using eBPF to log data being based in using shell pipes
  ☆41Updated 4 years ago
• trailofbits / linuxevents
  A sample PoC for container-aware exec events for osquery
  ☆24Updated last year
• kcfi / kcfi
  Control-Flow Integrity implementation for the Linux Kernel 3.19
  ☆20Updated 5 years ago
• KVM-VMI / kvm
  Fork of KVM with Virtual Machine Introspection patches
  ☆36Updated last year
• Gui774ume / utrace
  UTrace is a tracing utility that leverages eBPF to trace both user space and kernel space functions
  ☆42Updated 3 years ago
• saaph / eBPF_processor
  An IDA processor for eBPF bytecode
  ☆33Updated 7 years ago
• nccgroup / xendbg
  A feature-complete reference implementation of a modern Xen VMI debugger. ARCHIVED: Development continues at https://github.com/spencermi…
  ☆77Updated 4 years ago
• KVM-VMI / qemu
  Fork of QEMU with Virtual Machine Introspection patches
  ☆13Updated last year
• trailofbits / anselm
  Detect patterns of bad behavior in function calls
  ☆26Updated 4 years ago
• lumontec / lsmtrace
  Trace deep kernel events through eBPF and lsm hooks
  ☆35Updated 4 years ago
• Vector35 / generate_assembler
  generate assemblers from disassemblers, 2018 jailbreak security summit talk
  ☆37Updated 4 years ago
• tinyvmi / tinyvmi
  LibVMI in MiniOS
  ☆12Updated 3 years ago
• trailofbits / ebpf-verifier
  Harness for the Linux kernel eBPF verifier
  ☆32Updated 2 years ago
• grimm-co / linuxklee
  Pulled out Linux kernel code to run in userland so they could be targeted by AFL and KLEE
  ☆19Updated 5 years ago
• willfindlay / bpfbox
  🐝 BPFBox 📦 Exploring process confinement in eBPF
  ☆101Updated last year
• pagabuc / kallsyms-extractor
  Tool to extract the kallsyms (System.map) from a memory dump
  ☆25Updated last year
• nccgroup / libptmalloc
  Heap analysis tooling for ptmalloc
  ☆44Updated 2 years ago
• IntelLabs / kafl.linux
  Linux kernel branches for confidential compute research
  ☆17Updated last month
• gamozolabs / fuzztheory
  A project for simulating fuzzing such that analysis can be done on coverage/feedback/scaling mechanisms
  ☆9Updated 5 years ago
• wtdcode / mytalks
  PPT of my talks.
  ☆11Updated 3 years ago
• lifting-bits / dds
  Dr. Disassembler
  ☆35Updated 3 years ago
• milabs / stamina
  (Linux Kernel) Stack Monitoring Tool
  ☆44Updated 3 years ago
• S2E / libs2ecore
  S2E Core Engine Library
  ☆15Updated 5 years ago
• intel / vmtaint
  Full-VM taint analysis with Xen, Intel(R) Processor Trace and Triton.
  ☆39Updated last year
• intel / fffc
  Easy-to-use tool which autogenerates a type-aware fuzzer from a debuggable executable.
  ☆22Updated 2 years ago
• Bareflank / extended_apis
  deprecated
  ☆46Updated 6 years ago