ebpfkit
lkm-sandbox
| ebpfkit | lkm-sandbox | |
|---|---|---|
| 2 | 1 | |
| 660 | 44 | |
| - | - | |
| 0.7 | 4.1 | |
| about 1 year ago | over 3 years ago | |
| C | C | |
| Apache License 2.0 | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ebpfkit
- Show HN: Credentials dumper for Linux using eBPF
-
eBPF: A curated list of projects related to eBPF
eBPF is amazing because it has such a broad scope and is relatively simple to implement.
I'd recommend anyone interested in a starting point look at ebpfkit, the eBPF rootkit. https://github.com/Gui774ume/ebpfkit
lkm-sandbox
-
What would be a good pathway to contributing to the kernel as a person who is studying C?
Maybe you're interested in such learning projects: Linux Kernel (Module) Sandbox Should you happen to start your own, please let me know :-)
What are some alternatives?
fapolicyd - File Access Policy Daemon
ebpfkit-monitor - ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
awesome-ebpf - A curated list of awesome projects related to eBPF.
dattobd - kernel module for taking block-level snapshots and incremental backups of Linux block devices
TripleCross - A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
Bluebox2D - A Lightweight, 2D Sandbox Game written in C99.
lkrg - Linux Kernel Runtime Guard
kdai - kdai(Kernel Dynamic ARP Inspection) is a linux kernel module to defend against arp cache poisoning
bouheki - bouheki is KRSI(eBPF+LSM) based Linux security auditing tool.
reveng_rtkit - Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypass infamous rkhunter antirootkit.
p4c-xdp - Backend for the P4 compiler targeting XDP
asustor-platform-driver - Linux kernel platform driver for ASUSTOR NAS hardware (leds, buttons)