47,133 repositories indexed
1–15 of 15 · Most stars
A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.
eBPF-based Security Observability and Runtime Enforcement
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
ebpfkit is a rootkit powered by eBPF
A Linux packet crafting tool.
LordOS — a free, fast and secure GNU/Linux distribution based on Debian, with its own desktop environment: display server and Wayland compositor in C, a React UI engine on QuickJS, and private native apps.
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
🔍 Function-level tracing tool for Seccomp profiling, with eBPF
bpflock - eBPF driven security for locking and auditing Linux machines
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.