bouheki
ebpfkit-monitor
bouheki | ebpfkit-monitor | |
---|---|---|
1 | 1 | |
74 | 110 | |
- | - | |
0.0 | 0.6 | |
about 1 year ago | about 1 year ago | |
C | C | |
MIT License | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
bouheki
-
How to Prevent Data Exfiltration with eBPF
In this article, I will introduce bouheki, a tool that blocks data exfiltration by supply chain attacks and SSRF.
ebpfkit-monitor
What are some alternatives?
lkrg - Linux Kernel Runtime Guard
lkm-sandbox - Collection of Linux Kernel Modules and PoC to discover, learn and practice Linux Kernel Development
machine-learning-in-ebpf - This repository contains the code for the paper "A flow-based IDS using Machine Learning in eBPF", Contact: Maximilian Bachl
bad-bpf - A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29
ebpfkit - ebpfkit is a rootkit powered by eBPF
TripleCross - A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
gsocket - Connect like there is no firewall. Securely.
boopkit - Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.
openbsm - OpenBSM open audit implementation
redcanary-ebpf-sensor - Red Canary's eBPF Sensor