0x.Tools: X-Ray vision for Linux systems
-
Updated
Nov 25, 2025 - Python
#
eBPF
eBPF is a technology that can run sandboxed programs in a privileged context such as the operating system kernel.
It is used to safely and efficiently extend the capabilities of the kernel at runtime without requiring to change kernel source code or load kernel modules.
Here are 266 public repositories matching this topic...
Dump unix domain socket traffic with bpf
-
Updated
Apr 20, 2026 - Python
Performance visualisation tools
-
Updated
Feb 19, 2019 - Python
A Python binding for WinDivert driver
python windows linux networking ebpf windivert packet-capture network-security packet-filtering packet-manipulation libbpf
-
Updated
Sep 23, 2026 - Python
Demos for Pixie: github.com/pixie-io/pixie
-
Updated
Jun 13, 2023 - Python
Monitor DNS queries by host processes using eBPF!
-
Updated
Sep 30, 2025 - Python
An eBPF based lock tracer for PostgreSQL
-
Updated
Sep 25, 2026 - Python
与 eBPF 相关的精选项目的中文清单 （自动翻译自 https://github.com/zoidyzoidzoid/awesome-ebpf）
-
Updated
Aug 23, 2025 - Python
🐝 Ransomware Detection using Machine Learning with eBPF for Linux.
-
Updated
Nov 27, 2024 - Python
Real-time monitoring of KVM/Qemu VMs
-
Updated
Apr 20, 2024 - Python
-
Updated
Apr 10, 2023 - Python
Kernel-Enforced Install-Time Policies (KEIP): An eBPF/LSM based security tool that detects and blocks malicious network activity during pip install.Kernel-Enforced Install-Time Policies (KEIP): An eBPF/LSM based security tool that detects and blocks malicious network activity during pip install
-
Updated
Jun 1, 2026 - Python
Created by Alexei Starovoitov, Daniel Borkmann
Released 2014
- Followers
- 262 followers
- Website
- github.com/topics/ebpf
- Wikipedia
- Wikipedia