eBPF Developer Tutorial: Learning eBPF Step by Step with Examples

XDP tutorial

Automated upstream mirror for libbpf stand-alone build.

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

Qtap: An eBPF agent that captures pre-encrypted network traffic, providing rich context about egress connections and their originating processes.

Automated upstream mirror for bpftool stand-alone build.

极客时间专栏《eBPF 核心技术与实战》案例

Hades is a Host-Based Intrusion Detection System based on eBPF(mainly)

Writing eBPF programs with Elixir!

Template designed to get new developers with libbpf development.

Ethereum p2p traffic analysis with eBPF

Go library using eBPF to trace network flow events

Simple root privilege escalation detection using eBPF 🐝

XDP programs that increment stat counters for packets/bytes.

An eBPF kernel Observable Agent To Spy Performance Issue On OS.

XDP Virtual Server - an eBPF load balancer implementation and supporting Go library

Stores XDP programs and loaders I use for testing/helping others with (e)BPF and XDP.

eBPF/XDP based load balancer made using libbpf library and C/C++

eBPF programs to monitor and update kernel congestion window

Monitor and block specified processes and network connections with this docker-aware KRSI (BPF+LSM) security tool