A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking

C1786gpl-3.0

8 months ago

backdoorebpfkernel

OSSEC is an Open Source Host-based Intrusion Detection System that performs log

C4510other

6 months ago

compliancefile-integrity-managementfim

WinDBG Anti-RootKit Extension

C++610other

4 years ago

anomaly-detectionanti-rootkitc-plus-plus

ebpfkit is a rootkit powered by eBPF

C761apache-2.0

2 years ago

ebpfkernellinux

ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkit

C123apache-2.0

2 years ago

ebpfkernellinux