kprobes

High-level tracing language for Linux

Hide active VPN from selected Android apps (kernel module + LSPosed + Zygisk)

By Kprobe technology Open Source Host-based Intrusion Detection System(HIDS), from E_Bwill.

eBPF-based Ethernet traffic monitor using TC, XDP, kprobes and cgroups

Tool tracing syscalls in a fast way using eBPF linux kernel feature

Author of Project Adrishya a rootkit which use ftrace mechanism to hook syscall; (write this because God commanded me); work for both x86_64 and arm; CREDIT-(Oleksii Lozovskyi{ilammy})FOUNDER OF FTRACE HOOKING

🔬 eBPF / libbpf bindings for Node.js

Live terminal Redis traffic profiler built on eBPF. Ranks key patterns, flags footguns, reads TLS.

🔬 BPF Compiler Collection (BCC) frontend for Node.js

eBPF Tools - Tool for monitoring, performance benchmarking and tracing linux kernel

This repository contains a tool which traces syscalls in a fast way using eBPF linux kernel feature

使用kprobe获取sys_execve参数

Live per-container HTTP dashboard read from the kernel with eBPF. Rate, errors, latency. No sidecar, no app changes.

Short demo of Linux kernel hooks with kprobes.

Tool tracing syscalls in a fast way using eBPF linux kernel feature

Examples of C++ programs that generates BPF bytecodes

Misc BCC BPF Scripts

Enable parallel AI agent collaboration with conflict-free task splitting using directory isolation and recursive multi-agent spawning.

Named After the Scottish loch, Lomond is a simple example on how to use kprobes in an LKM for learning purposes and gainning a deeper understanding of the Linux kernel.

CS-550-Operating Systems - Spring 2020