#Libbpf

h3xduck

TripleCross

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

qpoint-io

qtap

Qtap: An eBPF agent that captures pre-encrypted network traffic, providing rich context about egress connections and their originating processes.

libbpf

libbpf-rs

Minimal and opinionated eBPF tooling for the Rust ecosystem

eunomia-bpf

eunomia-bpf

A Tool to make Build and Run eBPF programs easier

chriskaliX

Hades

Hades is a Host-Based Intrusion Detection System based on eBPF(mainly)

netbound

p2pflow

Ethereum p2p traffic analysis with eBPF