trailofbits / ebpf-common
Various utilities useful for developers writing BPF tools
☆30Updated 2 years ago
Alternatives and similar repositories for ebpf-common:
Users that are interested in ebpf-common are comparing it to the libraries listed below
- ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.☆116Updated 2 years ago
- This repository contains the companion code from the "All your tracing are belong to BPF" blog posts☆18Updated 2 years ago
- A C++ library that parses debug information encoded in BTF format☆25Updated 2 years ago
- A sample PoC for container-aware exec events for osquery☆24Updated last year
- A BPF-based syscall fault injector☆102Updated 2 years ago
- A feature-complete reference implementation of a modern Xen VMI debugger. ARCHIVED: Development continues at https://github.com/spencermi…☆77Updated 4 years ago
- Fork of KVM with Virtual Machine Introspection patches☆37Updated last year
- deprecated☆46Updated 6 years ago
- LibVMI in MiniOS☆12Updated 3 years ago
- generate assemblers from disassemblers, 2018 jailbreak security summit talk☆37Updated 4 years ago
- Example program using eBPF to log data being based in using shell pipes☆41Updated 4 years ago
- Tool to extract the kallsyms (System.map) from a memory dump☆26Updated last year
- Trace deep kernel events through eBPF and lsm hooks☆35Updated 4 years ago
- python library for dumping a linux process from memory☆34Updated 14 years ago
- Changing memory protection in an arbitrary process☆47Updated 6 years ago
- Heap analysis tooling for ptmalloc☆44Updated 2 years ago
- Full-VM taint analysis with Xen, Intel(R) Processor Trace and Triton.☆40Updated last year
- Tool for working with memory of a running Linux process☆12Updated 4 years ago
- Control-Flow Integrity implementation for the Linux Kernel 3.19☆20Updated 5 years ago
- Detect patterns of bad behavior in function calls☆26Updated 4 years ago
- x86/x64 architecture plugin☆39Updated last year
- x86 Dynamic Binary Translator Library☆34Updated 4 years ago
- A hypervisor or virtual machine monitor (VMM) fuzzer☆28Updated 5 years ago
- Dr. Disassembler☆35Updated 3 years ago
- ☆47Updated 6 years ago
- UTrace is a tracing utility that leverages eBPF to trace both user space and kernel space functions☆44Updated 3 years ago
- IDA Pro Python plugin to analyze and annotate Linux kernel alternatives☆23Updated 3 years ago
- Comparison table of VMX capabilities for a bunch of processors☆13Updated 4 years ago
- Pulled out Linux kernel code to run in userland so they could be targeted by AFL and KLEE☆20Updated 5 years ago
- Qiling Framework Documentation☆17Updated last month