4 ms·

Related: TripleCross - A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities. https://github.c

• citronneur 4y ago
  You have also https://github.com/pathtofile/bad-bpf https://github.com/pathtofile/bad-bpf or https://github.com/Gui774ume/ebpfkit https://github.com/Gui774ume/ebpfkit which are good references also
• kerng 4y ago
  Embrace the red also has a couple of good write ups to learn Offensive eBPF: https://embracethered.com/blog/posts/2021/offensive-bpf/ https://embracethered.com/blog/posts/2021/offensive-bpf/