High-level tracing language for Linux

By Kprobe technology Open Source Host-based Intrusion Detection System(HIDS), from E_Bwill.

TC, XDP, KProbe and CGroup eBPF based simple Ethernet interface traffic monitor and reporting tool

Tool tracing syscalls in a fast way using eBPF linux kernel feature

🔬 eBPF / libbpf bindings for Node.js

🔬 BPF Compiler Collection (BCC) frontend for Node.js

This repository contains a tool which traces syscalls in a fast way using eBPF linux kernel feature

eBPF Tools - Tool for monitoring, performance benchmarking and tracing linux kernel

使用kprobe获取sys_execve参数

Author of Project Adrishya a rootkit which use ftrace mechanism to hook syscall; (write this because God commanded me); work for both x86_64 and arm; CREDIT-(Oleksii Lozovskyi{ilammy})FOUNDER OF FTRACE HOOKING

Short demo of Linux kernel hooks with kprobes.

Tool tracing syscalls in a fast way using eBPF linux kernel feature

Misc BCC BPF Scripts

Monitor a Qdisc using a kernel probe

CS-550-Operating Systems - Spring 2020

Named After the Scottish loch, Lomond is a simple example on how to use kprobes in an LKM for learning purposes and gainning a deeper understanding of the Linux kernel.

A Linux kernel module that replaces a specific display's EDID

Examples of C++ programs that generates BPF bytecodes

Linux kernel module to trace and restrict access to system calls for specific processes

Source code for my personal portfolio and blog website. Features responsive design, dark mode, and a Markdown-powered blog.