A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29
Repository Index
47,133 repositories indexed
25–48 of 60 · Most stars
Alaz: Advanced eBPF Agent for Kubernetes Observability – Effortlessly monitor K8s service interactions and performance metrics in your K8s environment. Gain in-depth insights with service maps, metrics, and more, while staying alert to crucial system anomalies 🐝
- ddosify
- ebpf
- kubernetes
- metrics
Framework for running BPF programs with rules on Linux as a daemon. Container aware.
eBPF-based workload orchestration platform, built for Cloud Native ecosystem.
LordOS — a free, fast and secure GNU/Linux distribution based on Debian, with its own desktop environment: display server and Wayland compositor in C, a React UI engine on QuickJS, and private native apps.
Prototyping kernel development work outside mainline
- kernel-modules
- kernel
- xdp
- ebpf-programs
XDP project collaboration through a git-repo
The Linux port of the Sysinternals Sysmon tool.
Writing eBPF in Zig
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
- ebpf
- security
- linux-kernel
- linux-security-module
eBPF based TCP observability.
Monitor and profiler powered by eBPF to monitor network traffic, and diagnose CPU and network performance.
- skywalking
- observability
- apm
- service-mesh
An In-Kernel Solution Based on eBPF / XDP for 5G UPF
- 5g-core-network
- upf
- 5gc
- 5g-core
DWARF-aware eBPF tracer for source-level userspace tracing - Explore in a TUI or automate with a scriptable CLI
🔍 Function-level tracing tool for Seccomp profiling, with eBPF
- ebpf
- ebpf-programs
- golang
- seccomp
bpflock - eBPF driven security for locking and auditing Linux machines
Generic eBPF runtime
A cargo-generate template for Rust eBPF Projects using Aya
- cargo-generate
- ebpf
- rust
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Red Canary's eBPF Sensor
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
- ebpf
- harness
- ifc
- policy-engine
eBPF explorer is Web UI that lets you see all the maps and programs in eBPF subsystem
The repository host gives no description.
An EBPF based IPv4/IPv6 firewall with integrations for OpenZiti Zero-Trust Framework edge-routers and tunnellers