News for hackers. Stuff that matters.

A comment on Show HN: Credentials dumper for Linux using eBPF.

Re:Show HN: Credentials dumper for Linux using eBPF by shaicoleman on Tuesday July 05, 2022 @02:33PM (#31991960)
Related: TripleCross - A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

https://github.com/h3xduck/TripleCross

[ Parent | on HN ]
Re:Show HN: Credentials dumper for Linux using eBPF by citronneur on Tuesday July 05, 2022 @03:15PM (#31992480)
You have also https://github.com/pathtofile/bad-bpf or https://github.com/Gui774ume/ebpfkit which are good references also
[ Parent | on HN ]
Re:Show HN: Credentials dumper for Linux using eBPF by kerng on Wednesday July 06, 2022 @11:40PM (#32009667)
Embrace the red also has a couple of good write ups to learn Offensive eBPF:

https://embracethered.com/blog/posts/2021/offensive-bpf/

[ Parent | on HN ]