ebpfkit
dirtypipe-ebpf_detection
ebpfkit | dirtypipe-ebpf_detection | |
---|---|---|
2 | 1 | |
660 | 26 | |
- | - | |
0.7 | 1.8 | |
about 1 year ago | almost 2 years ago | |
C | C | |
Apache License 2.0 | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ebpfkit
- Show HN: Credentials dumper for Linux using eBPF
-
eBPF: A curated list of projects related to eBPF
eBPF is amazing because it has such a broad scope and is relatively simple to implement.
I'd recommend anyone interested in a starting point look at ebpfkit, the eBPF rootkit. https://github.com/Gui774ume/ebpfkit
dirtypipe-ebpf_detection
-
Show HN: Credentials dumper for Linux using eBPF
Yes we also use for https://github.com/airbus-cert/dirtypipe-ebpf_detection which is a dirtypipe detection program!
What are some alternatives?
fapolicyd - File Access Policy Daemon
TripleCross - A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
awesome-ebpf - A curated list of awesome projects related to eBPF.
bad-bpf - A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29
lkm-sandbox - Collection of Linux Kernel Modules and PoC to discover, learn and practice Linux Kernel Development
lkrg - Linux Kernel Runtime Guard
bouheki - bouheki is KRSI(eBPF+LSM) based Linux security auditing tool.
p4c-xdp - Backend for the P4 compiler targeting XDP
machine-learning-in-ebpf - This repository contains the code for the paper "A flow-based IDS using Machine Learning in eBPF", Contact: Maximilian Bachl
tracee - Linux Runtime Security and Forensics using eBPF
ebpfkit-monitor - ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits