Repository Index

A cargo-generate template for Rust eBPF Projects using Aya

• cargo-generate
• ebpf
• rust

ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits

• linux
• security
• kernel
• rootkit

Low-overhead sampling profiler and tracer for Ruby for Linux

• ruby
• bpf
• performance
• profilers

Red Canary's eBPF Sensor

• ebpf
• sensor
• edr-solutions

Contains materials for my technical presentation exploring Linux malware tradecraft—from userland and fileless techniques to kernel rootkits, ftrace, eBPF, and defensive strategies.

Sample BPF offload apps.

eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness

• ebpf
• harness
• ifc
• policy-engine

A curated list of awesome projects related to cilium

• awesome
• awesome-list
• cilium
• ebpf

Sample ebpf programs to analyze

• ebpf
• ebpf-programs
• ebpf-opcode

eBPF explorer is Web UI that lets you see all the maps and programs in eBPF subsystem

• ebpf

The repository host gives no description.

An EBPF based IPv4/IPv6 firewall with integrations for OpenZiti Zero-Trust Framework edge-routers and tunnellers

• ebpf
• ebpf-tc
• firewall
• ipv4

eBPF Security Monitoring and Sandboxing Agent Based on Aya

• aya
• bpf
• ebpf
• security

OpenCSD: eBPF Computational Storage Device (CSD) for Zoned Namespace (ZNS) SSDs in QEMU

• zns
• nvme
• qemu
• ebpf

Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise

• detection
• splunk
• bpfdoor
• vulnerability

Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.

• bpf
• ebpf
• kernel
• linux

Create, Read, Update and Delete benchmarks at crude hardware speeds for embedded engines and database servers, the Rust successor to UCSB & YCSB

• benchmark
• rocksdb
• leveldb
• ycsb

Sample project demonstrating how to use eBPF to encap/decap packets with an MPLS label.

• ebpf
• bpf
• linux
• linux-kernel-hacking

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.

• ai-security
• cybersecurity
• ids
• iot-security

VALE eBPF extension module

An example of an eBPF program hooking into the kill tracepoint

Open-source eBPF compatibility evidence and CI gate

• bpf
• ci
• compatibility
• ebpf

eBPF-based pod-level kernel metrics collector for Kubernetes

• cgroup
• daemonset
• ebpf
• helm-chart