1.cilium / cilium
eBPF-based Networking, Security, and Observability
- containers
- bpf
- security
- kubernetes
- kubernetes-networking
- cni
- +10 more
+47 stars
from 25,721 · score 3.87
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
21 repositories by Attention Score · Oct 28, 2026 – Nov 3, 2026 (UTC)
2.cilium / tetragon
eBPF-based Security Observability and Runtime Enforcement
+34 stars
from 5,116 · score 3.56
3.aya-rs / aya
Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.
+20 stars
from 4,872 · score 3.04
+17 stars
from 2,216 · score 2.89
5.bpftrace / bpftrace
High-level tracing language for Linux
+16 stars
from 10,387 · score 2.83
6.gojue / ecapture
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.
+15 stars
from 15,515 · score 2.77
7.kubeshark / kubeshark
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
- kubernetes
- golang
- rest
- grpc
- devops
- sniffer
- +14 more
+15 stars
from 12,111 · score 2.77
8.iovisor / bcc
BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more
+13 stars
from 22,714 · score 2.64
9.eunomia-bpf / agentsight
lightweight system-level observability for AI Agents
+13 stars
from 756 · score 2.64
10.deepflowio / deepflow
eBPF Observability - Distributed Tracing and Profiling
+9 stars
from 4,308 · score 2.30
11.microsoft / ebpf-for-windows
eBPF implementation that runs on top of Windows
+9 stars
from 3,578 · score 2.30
12.pythops / oryx
🕵️♂️ TUI for sniffing network traffic using eBPF on Linux
+9 stars
from 2,602 · score 2.30
13.cilium / ebpf
ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.
+8 stars
from 8,021 · score 2.20
14.aquasecurity / tracee
Linux Runtime Security and Forensics using eBPF
+8 stars
from 4,655 · score 2.20
15.cilium / hubble
Hubble - Network, Service & Security Observability for Kubernetes using eBPF
+6 stars
from 4,370 · score 1.95
16.mozillazg / ptcpdump
Process-aware, eBPF-based tcpdump
- ebpf
- ebpf-tc
- tcpdump
- tcpdump-like
- ebpf-go
- network-capture
- +9 more
+5 stars
from 1,294 · score 1.79
17.libbpf / libbpf
Automated upstream mirror for libbpf stand-alone build.
+3 stars
from 2,775 · score 1.39
18.cilium / pwru
Packet, where are you? -- eBPF-based Linux kernel networking debugger
+2 stars
from 3,845 · score 1.10
19.h3xduck / TripleCross
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
+2 stars
from 1,990 · score 1.10
20.bpfman / bpfman
An eBPF Manager for Linux and Kubernetes
+1 stars
from 771 · score 0.69
21.Neo23x0 / process-watcher
A process monitoring tool that tries to detect exploitation
+1 stars
from 113 · score 0.69