willfindlay / bpfbox
🐝 BPFBox 📦 Exploring process confinement in eBPF
☆102Updated last year
Alternatives and similar repositories for bpfbox:
Users that are interested in bpfbox are comparing it to the libraries listed below
- Source-code based coverage for eBPF programs actually running in the Linux kernel☆131Updated 2 months ago
- BPFContain is a container security daemon for GNU/Linux leveraging the power and safety of eBPF and Rust.☆58Updated 2 years ago
- An eBPF program debugger☆204Updated 2 years ago
- eBPF based syscalls, files and network events tracing framework☆92Updated 4 years ago
- LSM BPF module to block pwnkit (CVE-2021-4034) like exploits☆21Updated 3 years ago
- Fork from git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git (unstable and force pushed!)☆20Updated last year
- ☆18Updated 4 years ago
- A BPF-based syscall fault injector☆100Updated 2 years ago
- A file system events notifier based on eBPF☆66Updated 2 years ago
- ## Auto-archived due to inactivity. ## profile eBPF programs from Go☆87Updated last year
- Trace deep kernel events through eBPF and lsm hooks☆35Updated 4 years ago
- Example BPF program with LSM hooks☆33Updated 4 years ago
- ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.☆116Updated 2 years ago
- Sample ebpf programs to analyze☆91Updated 4 months ago
- bpflock - eBPF driven security for locking and auditing Linux machines☆147Updated 3 years ago
- Examples of using BPF ring buffer APIs☆124Updated 4 years ago
- eBPF - extended Berkeley Packet Filter tooling☆123Updated 2 years ago
- ☆88Updated this week
- ☆35Updated last week
- Various eBPF programs for tracing network connections☆30Updated 3 years ago
- Now moved into `github.com/inspektor-gadget/inspektor-gadget/pkg/gadget-collection/gadgets/traceloop`. Tracing system calls in cgroups u…☆198Updated 2 years ago
- A process level network security monitoring and enforcement project for Kubernetes, using eBPF☆43Updated 4 years ago
- The BTFhub Archive repository provides BTF files for those published kernels that lack native support for embedded BTF, thereby enhancing…☆107Updated last week
- agent for handling seccomp descriptors for container runtimes☆46Updated last year
- An assembler for eBPF programs written in an Intel-like assembly syntax.☆47Updated last year
- ebpf.io Website☆123Updated 2 weeks ago
- libsinsp, libscap, the kernel module driver, and the eBPF driver sources☆264Updated this week
- eBPF verifier based on abstract interpretation☆412Updated last week
- ☆18Updated 4 years ago
- Linux Kernel Runtime Integrity with eBPF☆174Updated last year