1.0xAX / linux-insides
A book-in-progress about the Linux kernel and its insides.
+1,293 stars
from 32,403 · score 7.17
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
13 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
2.s-matyukevich / raspberry-pi-os
Learning operating system development using Linux kernel and Raspberry Pi
+232 stars
from 13,731 · score 5.45
3.m0nad / Diamorphine
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
+194 stars
from 2,293 · score 5.27
4.gurugio / lowlevelprogramming-universityArchived
How to be low-level programmer
+173 stars
from 12,588 · score 5.16
5.lizrice / learning-ebpf
Learning eBPF, published by O'Reilly - out now! Here's where you'll find a VM config for the examples, and more
+116 stars
from 1,725 · score 4.76
6.Gui774ume / ebpfkit
ebpfkit is a rootkit powered by eBPF
+27 stars
from 839 · score 3.33
7.Cybereason-Public / owLSM
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
+21 stars
from 260 · score 3.09
8.unum-cloud / UCall
Web Serving and Remote Procedure Calls at 50x lower latency and 70x higher bandwidth than FastAPI, implementing JSON-RPC & REST over io_uring ☎️
+16 stars
from 1,320 · score 2.83
9.gen0sec / jailer
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
+13 stars
from 48 · score 2.64
10.duraki / virtualcar
A virtual car. Because you wouldn't download a car, would you?
+5 stars
from 154 · score 1.79
11.Gui774ume / ebpfkit-monitor
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
+4 stars
from 141 · score 1.61
12.bhanuprakasheagala / eTraceGen
A modular Linux telemetry engine built with eBPF, libbpf CO-RE, and Modern C++ that captures kernel-level process, file, syscall, and network events through a portable event-processing pipeline for decoding, enrichment, filtering, and structured output—forming the foundation for higher-level runtime intelligence.
+3 stars
from 1 · score 1.39
13.netoptimizer / prototype-kernel
Prototyping kernel development work outside mainline
+2 stars
from 314 · score 1.10