Repository Index

XDP tutorial

• xdp
• bpf
• libbpf
• tutorial

Learning eBPF, published by O'Reilly - out now! Here's where you'll find a VM config for the examples, and more

• ebpf
• ebpf-co-re
• linux-kernel

Contains materials for my technical presentation exploring Linux malware tradecraft—from userland and fileless techniques to kernel rootkits, ftrace, eBPF, and defensive strategies.

Sample BPF offload apps.

Sample ebpf programs to analyze

• ebpf
• ebpf-programs
• ebpf-opcode

Sample project demonstrating how to use eBPF to encap/decap packets with an MPLS label.

• ebpf
• bpf
• linux
• linux-kernel-hacking

An example of an eBPF program hooking into the kill tracepoint