tubular
ebpfkit
Our great sponsors
tubular | ebpfkit | |
---|---|---|
1 | 2 | |
244 | 660 | |
0.0% | - | |
0.0 | 0.7 | |
about 1 year ago | about 1 year ago | |
C | C | |
BSD 3-clause "New" or "Revised" License | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
tubular
-
Decoupling IP from services and sockets for addressing agility
About a month after this blog post was published, Cloudflare open sourced a tool called Tubular for binding sockets with eBPF. Nobody really noticed. But it’s extremely cool and it works.
Blog: https://blog.cloudflare.com/tubular-fixing-the-socket-api-wi...
GitHub: https://github.com/cloudflare/tubular
ebpfkit
- Show HN: Credentials dumper for Linux using eBPF
-
eBPF: A curated list of projects related to eBPF
eBPF is amazing because it has such a broad scope and is relatively simple to implement.
I'd recommend anyone interested in a starting point look at ebpfkit, the eBPF rootkit. https://github.com/Gui774ume/ebpfkit
What are some alternatives?
TripleCross - A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
fapolicyd - File Access Policy Daemon
bmc-cache - In-kernel cache based on eBPF.
awesome-ebpf - A curated list of awesome projects related to eBPF.
pwru - Packet, where are you? -- eBPF-based Linux kernel networking debugger
pomod - pomodoro daemon
lkm-sandbox - Collection of Linux Kernel Modules and PoC to discover, learn and practice Linux Kernel Development
opentelemetry-go-instrumentation - OpenTelemetry auto-instrumentation for Go applications
lkrg - Linux Kernel Runtime Guard
bouheki - bouheki is KRSI(eBPF+LSM) based Linux security auditing tool.
p4c-xdp - Backend for the P4 compiler targeting XDP