BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more
Repository Index
47,133 repositories indexed
1–21 of 21 · Most stars
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
- kubernetes
- golang
- rest
- grpc
macOS development environment setup: Easy-to-understand instructions with automated setup scripts for developer tools like Vim, Sublime Text, Bash, iTerm, Python data analysis, Spark, Hadoop MapReduce, AWS, Heroku, JavaScript web development, Android development, common data stores, and dev-based OS X defaults.
Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.
Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
- android-application
- security-analysis
- dynamic-analysis
- xposed
CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.
- clang
- cpp
- c
- clang-tidy
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
- mobile-security
- android
- malware-analyzer
- penetration-testing
Open PS5 firmware 14.10 research: Lua userland experiments, syscall and attack-surface analysis. Kernel read/write and a complete exploit are not demonstrated.
- ps5
- ps5-homebrew
- ps5-jailbreak
- ps5-tools
Umbrella package of the 'spatstat' family................
- r
- spatial-analysis
- spatial-data
- spatstat
An intuitive remotely-accessible system performance monitoring and task management tool for servers and headless Raspberry Pi setups.
- sysadmin-tool
- system-monitoring
- performance-analysis
- distributed-computing
File management and path analysis for Swift
- filesystem
- swift
- vfs
Yet Another Linux Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis
NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)
- fuzzer
- fuzzing
- kernel-fuzzer
- windows-kernel
Go's answer to pandas + scikit-learn: a batteries-included data analysis library with dataframes, statistics, machine learning, quant, and GPU acceleration. Run Python with seamless two-way variable sharing, or explore data straight from the Insyra CLI.
A simple utility for the calculation and analysis of IP subnet values, designed to simplify network configuration tasks.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Cryptographic Dataset Generation & Modelling Framework
Encrypts 64-bit elf files that decrypt at runtime.
- elf64
- linux
- elf-binaries
- elf-parser
A modular Linux telemetry engine built with eBPF, libbpf CO-RE, and Modern C++ that captures kernel-level process, file, syscall, and network events through a portable event-processing pipeline for decoding, enrichment, filtering, and structured output—forming the foundation for higher-level runtime intelligence.
- cpp20
- ebpf
- event-logger
- filesystem
Advanced eBPF-driven Digital Forensics and Incident Response (DFIR) framework for live Golang malware analysis, threat hunting, and observability.