kprobes · GitHub Topics

bpftrace / bpftrace

High-level tracing language for Linux

翻译 - Linux eBPF的高级跟踪语言

bpf eBPF tracing kprobes uprobes tracepoints usdt bcc

C++ 9.16 k

13 小时前

EBWi11 / AgentSmith-HIDS

By Kprobe technology Open Source Host-based Intrusion Detection System(HIDS), from E_Bwill.

翻译 - 通过Kprobe技术，来自E_Bwill的基于开源主机的入侵检测系统（HIDS）。

hids 安全 intrusion-detection detect-porcess-injection dns-query-hook kprobes create-file-hook connect-hook execve-hook load-lkm-hook anti-rootkit

C 595

4 年前

pmem / vltrace

Tool tracing syscalls in a fast way using eBPF linux kernel feature

syscall syscalls kprobes tracepoints eBPF ebpf-programs bcc

C 97

2 年前

dkorunic / pktstat-bpf

TC, XDP, KProbe and CGroup eBPF based simple Ethernet interface traffic monitor and reporting tool

Linux Network packet packet-capture 终端 tcpdump traffic xdp bpf eBPF observability kprobes

C 97

1 个月前

mildsunrise / node_bpf

🔬 eBPF / libbpf bindings for Node.js

Linux bpf kprobes Node.js

TypeScript 33

3 年前

mildsunrise / node_bpfcc

🔬 BPF Compiler Collection (BCC) frontend for Node.js

Node.js bpf bcc kprobes Linux

C++ 17

2 年前

sahmad98 / ebpf-tools

eBPF Tools - Tool for monitoring, performance benchmarking and tracing linux kernel

Linux tracing ebpf-programs eBPF 工具 kprobes tracepoints usdt 监控 frequency monitoring-tool benchmarking

Python 16

4 年前

vitalyvch / strace.ebpf

This repository contains a tool which traces syscalls in a fast way using eBPF linux kernel feature

syscall syscalls eBPF ebpf-programs bcc kprobes tracepoints

C++ 16

8 年前

zj1244 / kprobe_hook

使用kprobe获取sys_execve参数

hook kprobes

C 12

6 年前

malefax / Adrishya

Author of Project Adrishya a rootkit which use ftrace mechanism to hook syscall; (write this because God commanded me); work for both x86_64 and arm; CREDIT-(Oleksii Lozovskyi{ilammy})FOUNDER OF FTRAC...

Linux lkm-rootkit Cybersecurity device-driver Hacking kprobes malware-development arm arm64 linux-kernel-module low-level-programming rootkit

C 9

15 天前

konstantin89 / linux-kernel-kprobes-demo

Short demo of Linux kernel hooks with kprobes.

kprobes kernel-module Linux hooks

C 4

4 年前

ldorau / strace.ebpf

Tool tracing syscalls in a fast way using eBPF linux kernel feature

syscall syscalls kprobes tracepoints eBPF ebpf-programs bcc

8 年前

r4um / bpf-dump

Misc BCC BPF Scripts

bcc bpf Kernel tracing tracepoints kprobes

Python 2

7 年前

nehagupta94 / Operating-Systems

CS-550-Operating Systems - Spring 2020

kprobes c-programming kernel-module

C 1

5 年前

Assaf-R / lomond

Named After the Scottish loch, Lomond is a simple example on how to use kprobes in an LKM for learning purposes and gainning a deeper understanding of the Linux kernel.

kprobes Linux lkm 安全

C 1

4 个月前