Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.

✭ 5,374

c C#java python ocaml C++security framework ethereum reverse-engineering webassembly arm x86 x86-64 disassembler arm64 riscv mips bpf powerpc sparc m68k systemz m0s65xx m680x tms320c64x

Libseccomp

The main libseccomp repository

✭ 489

c bpf

Bpfd

Framework for running BPF programs with rules on Linux as a daemon. Container aware.

✭ 396

go docker linux security cli containers kernel tracing ebpf bpf

Bpftrace

High-level tracing language for Linux eBPF

✭ 4,526

C++LLVM c CMake python Yacc tracing ebpf bpf bcc kprobes tracepoints usdt uprobes

Libbpf

Automated upstream mirror for libbpf stand-alone build.

✭ 353

c tracing bpf

Rbpf

Rust virtual machine and JIT compiler for eBPF programs

✭ 306

rust assembler interpreter ebpf bpf jit-compiler

el7-bpf-specs

RPM specs for building bpf related tools on CentOS 7

✭ 38

shell Dockerfile rpm centos7 ebpf bpf bcc rpms bpftrace

libebpf

Experiemental userspace eBPF library

✭ 14

c llvm ebpf userspace bpf

bpfjit

Just-in-Time compilation of bpf

✭ 26

c Makefile objective c netbsd jit-compiler bpf bpfjit

ocaml-bpf

OCaml embedded eBPF assembler

✭ 18

ocaml Makefile ocaml-library bpf

oxdpus

A toy tool that leverages the super powers of XDP to bring in-kernel IP filtering

✭ 59

go c Makefile kernel network ebpf xdp bpf

pwru

Packet, where are you? -- Linux kernel networking debugger

✭ 694

c linux kernel network tracing ebpf bpf

bpflock

bpflock - eBPF driven security for locking and auditing Linux machines

✭ 54

c go kubernetes iot security kernel containers ebpf iot-security bpf lsm

tcpslice

tcpslice concatenates multiple pcap files together, or extracts time slices from one or more pcap files.

✭ 48

c shell Roff Makefile M4 pcap libpcap tcpdump packet-capture bpf berkeley-packet-filter bsd-packet-filter

bpfps

A tool to list and diagnose bpf programs. (Who watches the watchers..? :)

✭ 93

Makefile go Dockerfile linux cli tracing bpf

packiffer

lightweight cross-platform networking toolkit

✭ 52

go c Makefile pcap firewall packet inject libpcap ebpf xdp bpf gopacket

aya

Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.

✭ 950

rust security ebpf observability bpf

XDP-Firewall

An XDP firewall that is capable of filtering specific packets based off of filtering rules specified in a config file. IPv6 is supported!

✭ 129

c Makefile fast ipv6 tool firewall ebpf filtering xdp bpf drv skb xdp-native

cgnet

No description or website provided.

✭ 78

go c Makefile bpf cgroup kinvolk

go-tc

traffic control in pure go - it allows to read and alter queues, filters and classes

✭ 245

go linux network filter class ebpf qos bpf traffic-control qdisc rtnetlink

p2pflow

Ethereum p2p traffic analysis with eBPF

✭ 24

c linux networking ethereum blockchain p2p ebpf bpf devp2p libbpf

ebpfpub

ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.

✭ 86

C++CMake security monitoring llvm tracing ebpf bpf tracepoints

KubeArmor

Cloud-native Runtime Security Enforcement System

✭ 434

go shell c Makefile Dockerfile kubernetes security kernel system tool containers policy ebpf bpf lsm

DrawBridge

Layer 4 Single Packet Authentication Linux kernel module utilizing Netfilter hooks and kernel supported Berkeley Packet Filters (BPF)

✭ 81

c rust shell python Makefile linux-kernel iptables netfilter bpf knocker port-knocker port-knock iptables-extension port-knocking

cloud-native-bpf-workshop

No description or website provided.

✭ 94

shell workshop bpf kinvolk

LAF

Linux Application Firewall

✭ 8

python linux privacy firewall desktop bpf host-firewall

ebpf

eBPF package for Go

✭ 25

go ebpf bpf

ida-bpf-processor

BPF Processor for IDA Python

✭ 41

python c processor disassembler ida seccomp bpf idapython-plugin disasm

alon

Remix for Solana.

✭ 87

javascript typescript c llvm blockchain webassembly bpf hackathon-project solana solana-program

ebpfault

A BPF-based syscall fault injector

✭ 65

C++CMake debugging llvm ebpf fault-injection bpf

connect

tiny cross-platform socket API library

✭ 46

c linux api sample pcap sockets libc epoll raw-sockets netlink network-programming winsock bpf ndis

portablebpf

You came here so you could have a base code to serve you as an example on how to develop a BPF application, compatible to BCC and/or LIBBPF, specially LIBBPF, having the userland part made in C or PYTHON.

✭ 32

c Makefile go linux kernel portable howto example linux-kernel clang ebpf bpf kprobes vmlinux bpftrace libbpf bpfcc ebpf-bytecode bpf-maps

oko

Extend Open vSwitch with BPF programs at runtime

✭ 29

c python Roff shell Makefile M4 dpdk openflow openvswitch ovs bpf

libbpf-sys

Rust bindings to libbpf from the Linux kernel

✭ 103

rust linux ebpf xdp bpf

1-54 of 54 bpf projects