ebpfkit-monitor VS lkm-sandbox

Compare ebpfkit-monitor vs lkm-sandbox and see what are their differences.

ebpfkit-monitor

ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits (by Gui774ume)
Linux Security Kernel rootkit linux-kernel Ebpf linux-kernel-hacking runtime-security
Source Code
Suggest alternative
Edit details

lkm-sandbox

Collection of Linux Kernel Modules and PoC to discover, learn and practice Linux Kernel Development (by tpiekarski)
Linux linux-kernel linux-kernel-hacking linux-kernel-module C Sandbox Device character-device proc kernel-ring-buffer kernel-development Makefile Parameters Practice study
Source Code
Suggest alternative
Edit details
InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured
ebpfkit-monitor lkm-sandbox
1 1
110 44
- -
0.6 4.1
about 1 year ago over 3 years ago
C C
Apache License 2.0 GNU General Public License v3.0 only
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

ebpfkit-monitor

Posts with mentions or reviews of ebpfkit-monitor. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-04-03.

lkm-sandbox

Posts with mentions or reviews of lkm-sandbox. We have used some of these posts to build our list of alternatives and similar projects.

What are some alternatives?

When comparing ebpfkit-monitor and lkm-sandbox you can also consider the following projects:

bad-bpf - A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29

ebpfkit - ebpfkit is a rootkit powered by eBPF

TripleCross - A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

dattobd - kernel module for taking block-level snapshots and incremental backups of Linux block devices

Bluebox2D - A Lightweight, 2D Sandbox Game written in C99.

boopkit - Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.

kdai - kdai(Kernel Dynamic ARP Inspection) is a linux kernel module to defend against arp cache poisoning

redcanary-ebpf-sensor - Red Canary's eBPF Sensor

reveng_rtkit - Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypass infamous rkhunter antirootkit.

machine-learning-in-ebpf - This repository contains the code for the paper "A flow-based IDS using Machine Learning in eBPF", Contact: Maximilian Bachl

asustor-platform-driver - Linux kernel platform driver for ASUSTOR NAS hardware (leds, buttons)

ebpfkit-monitor vs bad-bpf lkm-sandbox vs ebpfkit ebpfkit-monitor vs TripleCross lkm-sandbox vs dattobd ebpfkit-monitor vs ebpfkit lkm-sandbox vs Bluebox2D ebpfkit-monitor vs boopkit lkm-sandbox vs kdai ebpfkit-monitor vs redcanary-ebpf-sensor lkm-sandbox vs reveng_rtkit ebpfkit-monitor vs machine-learning-in-ebpf lkm-sandbox vs asustor-platform-driver