qmonnet/rbpf

Rust virtual machine and JIT compiler for eBPF programs

Language: Rust - Size: 937 KB - Last synced at: 1 day ago - Pushed at: 26 days ago - Stars: 1,009 - Forks: 288

parca-dev/parca

Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.

Language: TypeScript - Size: 136 MB - Last synced at: 4 days ago - Pushed at: 4 days ago - Stars: 4,484 - Forks: 235

inspektor-gadget/inspektor-gadget

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF

Language: C - Size: 103 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 2,490 - Forks: 289

digma-ai/digma

🧑‍💻🔭 Digma helps you fix performance issues in your code by automatically profiling the code execution. Using APMs to identify code bottlenecks, query problems and scalability issues takes time and effort - Digma automates all of that. Digma is free for developers - get it here: https://digma.ai/get-digma/

Language: Shell - Size: 19 MB - Last synced at: 6 days ago - Pushed at: 6 days ago - Stars: 397 - Forks: 11

parca-dev/parca-agent

eBPF based always-on profiler auto-discovering targets in Kubernetes and systemd, zero code changes or restarts needed!

Language: Go - Size: 64.2 MB - Last synced at: 6 days ago - Pushed at: 6 days ago - Stars: 630 - Forks: 79

vazw/simple-firewall

simple firewall a simple kernel level firewall using aya-ebpf

Language: Rust - Size: 2.41 MB - Last synced at: 8 days ago - Pushed at: 8 days ago - Stars: 3 - Forks: 0

x86taka/xdp-etherip

Implementation of EtherIP with XDP

Language: Go - Size: 102 KB - Last synced at: 8 days ago - Pushed at: 16 days ago - Stars: 13 - Forks: 0

garnet-org/jibril-balag

بلاغ - balag (announcement) - A collection of Jibril’s public releases. Each update is a gentle echo of guidance, shared for all who journey together.

Language: Shell - Size: 15.6 KB - Last synced at: 8 days ago - Pushed at: 21 days ago - Stars: 2 - Forks: 0

alegrey91/harpoon

🔍 Seccomp profiling and function-level tracing tool.

Language: C - Size: 1.2 MB - Last synced at: 1 day ago - Pushed at: 26 days ago - Stars: 155 - Forks: 10

garnet-org/jibril-kitab

كتاب - kitab (book) - Source code for jibril.garnet.ai - A living book of guidance and knowledge, illuminating the path for all who seek to understand and protect their systems.

Language: Python - Size: 17.8 MB - Last synced at: 8 days ago - Pushed at: 11 days ago - Stars: 1 - Forks: 0

furkanonder/DnsTrace

Monitor DNS queries by host processes using eBPF!

Language: Python - Size: 539 KB - Last synced at: 4 days ago - Pushed at: 27 days ago - Stars: 172 - Forks: 10

mikuchi9/ebpf-xgress-wireweight

Bandwidth analyzer using eBPF with ingress/egress tracking and protocol vs payload breakdown.

Language: C - Size: 0 Bytes - Last synced at: 18 days ago - Pushed at: 18 days ago - Stars: 0 - Forks: 0

mikeroyal/LLVM-Guide

LLVM (Low Level Virtual Machine) Guide. Learn all about the compiler infrastructure, which is designed for compile-time, link-time, run-time, and "idle-time" optimization of programs. Originally implemented for C/C++ , though, has a variety of front-ends, including Java, Python, etc.

Language: C++ - Size: 191 KB - Last synced at: 28 days ago - Pushed at: over 1 year ago - Stars: 169 - Forks: 10

mranv/ebpf-file-monitor

This utility allows users to track changes in a specified file and prints a timestamp when modifications occur.

Language: Rust - Size: 275 KB - Last synced at: 6 days ago - Pushed at: over 1 year ago - Stars: 6 - Forks: 1

listendev/jibril-releases 📦

Jibril: A performant and low impact Linux runtime security tool agent.

Language: Shell - Size: 1.67 MB - Last synced at: 28 days ago - Pushed at: about 1 month ago - Stars: 13 - Forks: 2

l3af-project/eBPF-Package-Repository

eBPF Programs

Language: C - Size: 1.47 MB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 60 - Forks: 20

mikeroyal/eBPF-Guide

eBPF (extended Berkeley Packet Filter) Guide. Learn all about the eBPF Tools and Libraries for Security, Monitoring , and Networking.

Language: Go - Size: 181 KB - Last synced at: about 1 month ago - Pushed at: over 1 year ago - Stars: 584 - Forks: 55

k8spacket/k8spacket

k8spacket - collects TCP traffic and TLS connection metadata in the Kubernetes cluster using eBPF and visualizes in Grafana

Language: Go - Size: 212 MB - Last synced at: about 1 month ago - Pushed at: about 2 months ago - Stars: 1,055 - Forks: 52

getanteon/alaz

Alaz: Advanced eBPF Agent for Kubernetes Observability – Effortlessly monitor K8s service interactions and performance metrics in your K8s environment. Gain in-depth insights with service maps, metrics, and more, while staying alert to crucial system anomalies 🐝

Language: C - Size: 7.17 MB - Last synced at: about 1 month ago - Pushed at: 9 months ago - Stars: 688 - Forks: 32

chriskaliX/Hades

Hades is a Host-Based Intrusion Detection System based on eBPF(mainly)

Language: C - Size: 18.3 MB - Last synced at: about 1 month ago - Pushed at: 7 months ago - Stars: 291 - Forks: 53

xdp-project/bpf-examples

Making eBPF programming easier via build env and examples

Language: C - Size: 1.5 MB - Last synced at: about 1 month ago - Pushed at: 4 months ago - Stars: 488 - Forks: 105

vbpf/ebpf-samples

Sample ebpf programs to analyze

Language: C - Size: 2.37 MB - Last synced at: about 1 month ago - Pushed at: 6 months ago - Stars: 92 - Forks: 12

iovisor/kubectl-trace

Schedule bpftrace programs on your kubernetes cluster using the kubectl

Language: Go - Size: 9.11 MB - Last synced at: about 1 month ago - Pushed at: 12 months ago - Stars: 2,110 - Forks: 169

netoptimizer/prototype-kernel

Prototyping kernel development work outside mainline

Language: C - Size: 956 KB - Last synced at: about 1 month ago - Pushed at: 5 months ago - Stars: 310 - Forks: 107

m-osource/MiEnRo

eXpress Data Path Router

Language: C - Size: 521 KB - Last synced at: about 2 months ago - Pushed at: about 2 months ago - Stars: 0 - Forks: 0

idlab-discover/RustiFlow

Flow feature extraction tool built in Rust using eBPF

Language: Rust - Size: 15.3 MB - Last synced at: about 2 months ago - Pushed at: about 2 months ago - Stars: 18 - Forks: 1

samankhalife/xdf

X-Defender💥 is an advanced (D)DoS mitigation tool built with eBPF and XDP. It not only filters and limits malicious traffic in real-time but also takes a proactive and aggressive approach to neutralize threats before they impact your network.

Language: Roff - Size: 4.4 MB - Last synced at: about 2 months ago - Pushed at: 4 months ago - Stars: 14 - Forks: 1

jalalmostafa/socktrace

A tool to trace BSD sockets concurrency behavior using eBPF

Language: C - Size: 38.1 KB - Last synced at: 19 days ago - Pushed at: 3 months ago - Stars: 1 - Forks: 0

syrnxalno/ebpf_leak_monitor

A lightweight extended Berkeley Packet Filter (eBPF)-based system for real-time memory leak detection using kernel-level tracing of kmalloc and kfree. Includes a C-based agent, a Go-powered server, and a MERN web app for live visualization and analysis.

Size: 2.93 KB - Last synced at: 2 months ago - Pushed at: 3 months ago - Stars: 0 - Forks: 0

sumerc/gilstats.py

A utility for dumping per-thread statistics for CPython GIL using eBPF

Language: Python - Size: 54.7 KB - Last synced at: 3 months ago - Pushed at: about 1 year ago - Stars: 17 - Forks: 1

Assaf-R/aisir

Named after the beautiful loch Aisir in northen Scotland, Aisir is an Ebpf based tool that logs and filters connection to remote IP addresses

Language: Python - Size: 14.6 KB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 3 - Forks: 0

kakkoyun/py-perf

A Proof-of-concept, low-overhead, sampling CPU profiler for Python implemented using eBPF.

Language: Rust - Size: 762 KB - Last synced at: 3 months ago - Pushed at: over 1 year ago - Stars: 16 - Forks: 1

elijahu1/ebpf-container-security

eBPF container escape detector prototype | Kernel 6.8+ | Early dev phase | Expect kernel panics ⚠️

Language: C - Size: 752 KB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 1 - Forks: 0

pmem/vltrace 📦

Tool tracing syscalls in a fast way using eBPF linux kernel feature

Language: C - Size: 1.14 MB - Last synced at: 5 months ago - Pushed at: over 2 years ago - Stars: 98 - Forks: 20

REZ0AN/lb-xdp-poc

A custom LoadBalancer Using eBPF and xdp

Language: Go - Size: 6.57 MB - Last synced at: 4 months ago - Pushed at: about 1 year ago - Stars: 2 - Forks: 0

chen-keinan/kube-knark

Open Source runtime tool which help to detect malware code execution and run time mis-configuration change on a kubernetes cluster

Language: Go - Size: 6.45 MB - Last synced at: 2 months ago - Pushed at: over 3 years ago - Stars: 36 - Forks: 4

fzakaria/ebpf-mpls-encap-decap

Sample project demonstrating how to use eBPF to encap/decap packets with an MPLS label.

Language: C - Size: 48.8 KB - Last synced at: 3 months ago - Pushed at: over 5 years ago - Stars: 54 - Forks: 7

h0x0er/ebpf-learn

Learning eBPF

Language: C - Size: 2.85 MB - Last synced at: 10 days ago - Pushed at: over 1 year ago - Stars: 4 - Forks: 0

palanik1/opened_transformation

OPENED eBPF Hook Point Transformation Tool

Language: Roff - Size: 759 KB - Last synced at: 11 months ago - Pushed at: over 2 years ago - Stars: 0 - Forks: 1

emilmasoumi/ebpf-assembler

eBPF bytecode assembler and compiler

Language: C++ - Size: 248 KB - Last synced at: 12 months ago - Pushed at: about 1 year ago - Stars: 16 - Forks: 3

fbac/skproxy

eBPF proxy with loadbalancing capabilities

Language: Go - Size: 111 KB - Last synced at: 30 days ago - Pushed at: almost 3 years ago - Stars: 6 - Forks: 1

netgroup/eclat-daemon

eCLAT (eBPF Chains Language And Toolset) daemon.

Language: Python - Size: 2.11 MB - Last synced at: about 1 year ago - Pushed at: about 2 years ago - Stars: 2 - Forks: 0

eBPFDevSecTools/ebpf-client-sdk Fork of dushyantbehl/ebpf-client-sdk

ebpf-client-sdk

Language: Python - Size: 42 KB - Last synced at: about 1 year ago - Pushed at: over 2 years ago - Stars: 1 - Forks: 0

fbac/sklookup-go

eBPF sk_lookup program as a golang library

Language: C - Size: 71.5 MB - Last synced at: 3 months ago - Pushed at: over 2 years ago - Stars: 29 - Forks: 3

AUTOM77/RWS

🦐Unofficial eBPF-based Rust implementation of Cloudflare Warp Proxy with Socks5 support

Language: Rust - Size: 449 KB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 2 - Forks: 1

MeherRushi/FlowSentryX

FlowSentryX is an open-source XDP-based fast packet processing DOS and DDOS Mitigation Framework solution designed to protect your network infrastructure from Denial of Service (DOS) and Distributed Denial of Service (DDOS) attacks at Layer 3 & 4.

Language: Jupyter Notebook - Size: 112 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 7 - Forks: 7

Laugharne/Keynote__eBPF_-_Everything_You_Need_to_Know_in_5_Minutes

eBPF has become the key technology for infrastructure software. This session tells you everything you need to know about eBPF in 5 minutes. Why eBPF matters and why it exists. What it can do. What it can’t do. Who uses it for what. And finally, what the future holds.

Size: 336 KB - Last synced at: 4 months ago - Pushed at: over 1 year ago - Stars: 0 - Forks: 0

ark-7/arkLB 📦

eBPF/XDP based load balancer made using libbpf library and C/C++

Language: C - Size: 22.9 MB - Last synced at: about 1 year ago - Pushed at: about 2 years ago - Stars: 4 - Forks: 2

sahmad98/ebpf-tools

eBPF Tools - Tool for monitoring, performance benchmarking and tracing linux kernel

Language: Python - Size: 42 KB - Last synced at: over 1 year ago - Pushed at: over 4 years ago - Stars: 13 - Forks: 1

eBPFDevSecTools/opened

OPENED Tool to extract specific eBPF functions from large monoliths (tested on Katran, Mizar, Cilium..)

Language: Python - Size: 23.5 MB - Last synced at: about 1 year ago - Pushed at: about 2 years ago - Stars: 11 - Forks: 6

p3nj/KerlockHomes

Kerlock Homes: A modular program that secures the kernel, defends user-space, and fortifies home directories against eBPF-based threats.

Language: C - Size: 619 KB - Last synced at: 11 months ago - Pushed at: over 1 year ago - Stars: 1 - Forks: 0

eBPFDevSecTools/ebpf-projects-annotations

Registry of open source eBPF Projects

Language: C - Size: 4.18 MB - Last synced at: almost 2 years ago - Pushed at: almost 2 years ago - Stars: 6 - Forks: 7

anmolsarma/bpf-elf2insn

A utility that extracts eBPF instructions from an ELF file and prints C-like output

Language: Go - Size: 1.95 KB - Last synced at: almost 2 years ago - Pushed at: almost 7 years ago - Stars: 3 - Forks: 0

Dunateo/Firewall-BPF

Linux personal firewall

Language: Python - Size: 30.7 MB - Last synced at: 10 months ago - Pushed at: about 4 years ago - Stars: 1 - Forks: 0

ark-7/ark-rust

arkLB in rust made using aya framework

Language: Rust - Size: 144 MB - Last synced at: about 2 years ago - Pushed at: about 2 years ago - Stars: 2 - Forks: 0

niclashedam/ebpf-crypto 📦

Language: C - Size: 40 KB - Last synced at: over 2 years ago - Pushed at: over 4 years ago - Stars: 4 - Forks: 0

hoomaac/bpfsec

basic ebpf playground to work and play a little with it

Language: C++ - Size: 27.3 KB - Last synced at: 20 days ago - Pushed at: over 2 years ago - Stars: 0 - Forks: 0

vitalyvch/strace.ebpf

This repository contains a tool which traces syscalls in a fast way using eBPF linux kernel feature

Language: C++ - Size: 493 KB - Last synced at: over 2 years ago - Pushed at: almost 8 years ago - Stars: 15 - Forks: 6

rzetelskik/bpf-sanitizer

Linux kernel patch introducing a new eBPF program type for sanitizing writes.

Language: C - Size: 1.27 MB - Last synced at: about 1 month ago - Pushed at: almost 3 years ago - Stars: 0 - Forks: 0

fzakaria/rust-ebpf-demo

A simple pure hello world demo of writing an ebpf filter in rust

Language: Rust - Size: 2.93 KB - Last synced at: about 2 months ago - Pushed at: over 5 years ago - Stars: 1 - Forks: 0

mildred/bpf-sk-lookup-manager

Manages sk_lookup eBPF hook

Language: C - Size: 1.96 MB - Last synced at: about 2 years ago - Pushed at: about 3 years ago - Stars: 1 - Forks: 0

ldorau/strace.ebpf

Tool tracing syscalls in a fast way using eBPF linux kernel feature

Size: 836 KB - Last synced at: 3 months ago - Pushed at: almost 8 years ago - Stars: 3 - Forks: 2