Alternatives and similar repositories for ebpf-common

Users that are interested in ebpf-common are comparing it to the libraries listed below

• trailofbits / ebpfpub
  ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.
  ☆118Updated last month
• trailofbits / ebpfault
  A BPF-based syscall fault injector
  ☆105Updated 2 weeks ago
• trailofbits / btfparse
  A C++ library that parses debug information encoded in BTF format
  ☆28Updated 2 years ago
• trailofbits / bpf_tutorials_code
  This repository contains the companion code from the "All your tracing are belong to BPF" blog posts
  ☆19Updated 2 years ago
• pathtofile / bpf-pipesnoop
  Example program using eBPF to log data being based in using shell pipes
  ☆41Updated 4 years ago
• KVM-VMI / kvm
  Fork of KVM with Virtual Machine Introspection patches
  ☆37Updated 2 years ago
• trailofbits / linuxevents
  A sample PoC for container-aware exec events for osquery
  ☆24Updated last year
• nccgroup / xendbg
  A feature-complete reference implementation of a modern Xen VMI debugger. ARCHIVED: Development continues at https://github.com/spencermi…
  ☆78Updated 5 years ago
• abenkhadra / bcov
  Static instrumentation tool for efficient binary-level coverage analysis.
  ☆151Updated 4 years ago
• GJDuck / e9syscall
  A system call interception tool
  ☆57Updated last year
• intel / vbh
  ☆93Updated last year
• lumontec / lsmtrace
  Trace deep kernel events through eBPF and lsm hooks
  ☆42Updated 4 years ago
• elfmaster / kdress
  Transform vmlinuz into a fully debuggable vmlinux that can be used with /proc/kcore
  ☆132Updated last year
• brainsmoke / ptrace-burrito
  a friendly wrapper around ptrace
  ☆134Updated 3 years ago
• nccgroup / ebpf
  eBPF - extended Berkeley Packet Filter tooling
  ☆132Updated 3 years ago
• tinyvmi / tinyvmi
  LibVMI in MiniOS
  ☆12Updated 4 years ago
• pagabuc / kallsyms-extractor
  Tool to extract the kallsyms (System.map) from a memory dump
  ☆29Updated 2 years ago
• KVM-VMI / nitro
  ☆47Updated 7 years ago
• blitz / baresifter
  A bare-metal x86 instruction set fuzzer a la Sandsifter
  ☆73Updated last year
• caps-tum / dbrew
  A library for dynamic binary rewriting
  ☆58Updated 4 years ago
• srg-imperial / SaBRe
  Load-time selective binary rewriting
  ☆164Updated 3 years ago
• Bareflank / boxy
  bareflank based hypervisor with guest support
  ☆62Updated 5 years ago
• Cisco-Talos / Barbervisor
  Intel x86 bare metal hypervisor for researching snapshot fuzzing ideas.
  ☆169Updated 5 years ago
• intel-tools / srs
  GitHub Actions based repository scanning workflows with a primary goal of evaluating C & C++ repositories for risks.
  ☆16Updated last year
• rexguowork / phantom-attack
  POC for Phantom Attack
  ☆89Updated 3 years ago
• redplait / lkcd
  ugly code to check linux kernel memory and dump some internal structures
  ☆48Updated last year
• elfmaster / dt_infect
  ELF Shared library injector using DT_NEEDED precedence infection. Acts as a permanent LD_PRELOAD
  ☆112Updated 5 years ago
• nccgroup / libptmalloc
  Heap analysis tooling for ptmalloc
  ☆46Updated 3 years ago
• JonathonReinhart / nosecmem
  Demonstrate ability to read memfd_secret() data from the kernel
  ☆58Updated 2 years ago
• lifting-bits / klee
  KLEE Symbolic Execution Engine
  ☆60Updated 6 years ago