bad-bpf
by pathtofile
A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29
AI summary
Kernel exploit demos
Demonstrates security vulnerabilities in the Linux kernel's eBPF system
- stars
- 556
- forks
- 82
- watching
- 9
- awesome list
- 1
Similar projects
Found by comparing what the projects do, not just their names.
XDP demos
Provides eBPF XDP demo applications for testing and demonstrating software and hardware offloading capabilities
Kernel vulnerability scanner
Automated framework for discovering and exploiting kernel vulnerabilities on Linux and macOS.
MPLS filter demo
Demonstrates packet encapsulation and decapsulation with MPLS labels using eBPF
Rootkit
A rootkit powered by eBPF designed to demonstrate offensive security techniques and bypass kernel protections.
Vulnerability demo
An example C program demonstrating common types of vulnerabilities, designed to be fuzzed using various tools.
Linux lockdown
A security solution using eBPF to restrict Linux access and protect against attacks
eBPF samples
This repository provides a collection of sample eBPF programs for analysis and testing purposes.
eBPF verifier
A tool that verifies the correctness of eBPF programs using an abstract interpretation approach
Linux kernel exploits
A collection of proof-of-concept exploits for vulnerabilities in the Linux kernel
Erbpf detector
A tool designed to detect and protect against certain types of malicious eBPF bytecode
Malware analyzer
Tools for analyzing PPLFault-related malware behavior on Windows 10
Rootkit
A Linux rootkit demonstrating the offensive capabilities of eBPF technology using various techniques such as backdoors, C2 channels and code injection.
EBPF explorer
A tool to explore and visualize the eBPF subsystem of Linux hosts
CTF exploits
A curated collection of exploits and vulnerabilities used in Capture The Flag (CTF) challenges
DeFi testbed
A DeFi protocol with intentional vulnerabilities for testing and learning secure smart contract development
Featured in 1 awesome list
Each link jumps to the spot where the list mentions bad-bpf.
