ebpfkit
A rootkit that leverages eBPF to implement offensive security techniques like container breakouts, network scanning, and RASP bypass.
What is ebpfkit?
ebpfkit is a rootkit that leverages eBPF (Extended Berkeley Packet Filter) technology to implement offensive security techniques. It demonstrates how kernel-level eBPF capabilities can be weaponized for malicious activities including container breakouts, network scanning, file system monitoring, and bypassing security protections. The project serves as an educational resource showing the potential security risks of eBPF technology.
Security researchers, ethical hackers, and penetration testers who want to understand offensive eBPF techniques and container security vulnerabilities. Also valuable for security engineers defending against kernel-level attacks.
Provides a comprehensive demonstration of eBPF's offensive capabilities in a single tool, with features covering multiple attack vectors. It's specifically designed for educational purposes to help security professionals understand and defend against sophisticated kernel-level threats.
Overview
ebpfkit is a rootkit powered by eBPF
Use Cases
Best For
- Studying offensive eBPF techniques and capabilities
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
