Hacker News with Generative AI: eBPF

Harpoon: Trace syscalls from user-space functions, by using eBPF (github.com/alegrey91)
Harpoon aims to capture the syscalls (as if they were fishes) from the execution flow (the river) of a single user-defined function.

Security, Linux, Programming, eBPF, Debugging

8 points by thunderbong 30 days ago | 0 comments

A KeyLogger using eBPF written in Rust (github.com/pythops)
Capture keystrokes and store them in a queue in the kernel. Intercept DNS requests and inject the captured keystroes in the DNS payload then redirect the request designated remote server acting as a DNS proxy. On the remote server, extract the keys from the DNS payload and send a valid DNS response. Intercept the response and modify its source address so the initial request will complete successfully.

Security, Rust, eBPF, Networking, Keylogging

11 points by pythops 45 days ago | 0 comments

eBPF Security Threat Model [pdf] (github.com/ebpffoundation)

Security, eBPF, Threat Modeling

9 points by mooreds 48 days ago | 0 comments

eBPF Verifier Code Review – NCC Group [pdf] (nccgroup.com)

Security, Code Review, eBPF

14 points by ghostpepper 61 days ago | 0 comments

Kyanos: eBPF-based network issue analysis tool (github.com/hengyoush)
Kyanos is an eBPF-based network issue analysis tool that enables you to capture network requests, such as HTTP, Redis, and MySQL requests.

Network Analysis, eBPF, Open Source, Tools, Networking

194 points by lijunhao 63 days ago | 14 comments

Every boring problem found in eBPF (2022) (tmpout.sh)
You may be wondering, "if you're filling an article with caveats about BPF, why should I even bother trying to use it?" Great question, straw man. There are a number of things BPF is really, really, good at that you should consider.

eBPF, Operating Systems, Networking, Security, Performance

163 points by udev4096 78 days ago | 11 comments

TUI for sniffing network traffic using eBPF on Linux (github.com/pythops)
🕵️‍♂️ TUI for sniffing network traffic using eBPF on Linux

Network Security, Linux, eBPF, TUI, Open Source

11 points by pythops 131 days ago | 0 comments

Show HN: Goroutine Monitor Powered by eBPF (github.com/keisku)
gmon is a tool designed to monitor the creation and destruction of goroutines in a Go program, drawing inspiration from the presentation Real World Debugging with eBPF.

Go Programming, Debugging, Performance Monitoring, eBPF

75 points by keisku 132 days ago | 2 comments

Writing a system call tracer using eBPF (sh4dy.com)

System Calls, eBPF, Linux Kernel, Security, Programming

99 points by tim_sw 166 days ago | 2 comments

eBPF Offensive Capabilities – Get Ready for Next-Gen Malware (2023) (sysdig.com)

Security, Malware, eBPF, Networking

89 points by password4321 177 days ago | 13 comments

Instrumenting Python GIL with eBPF (coroot.com)

Python, Performance, eBPF, Monitoring, Debugging

118 points by lukastyrychtr 183 days ago | 33 comments

Instrumenting Python GIL with eBPF (coroot.com)