Breaking eBPF Security: How Kernel Rootkits Blind Observability Tools
Deep technical analysis of bypassing eBPF-based security solutions through kernel-level hooks targeting BPF iterators, ringbuffers, and perf events
Knowledge Base
Latest articles
Starting a VM as an unprivileged Linux User
How to run Docker-in-VM-in-Docker on Segfault's Servers
How does Linux start a process
...and how to ptrace the entry point and m3ss w1th da stack.
WireGuard into a private LAN via CloudFlare Tunnels
TL;DR: The era of only filtering ingress traffic has come to an end. Differentiating between legitimate and non-legitimate egress traffic is challenging when the attacker uses Cloudflare, Google-drive or AWS. Introduction In this article, you will le...
Free Linux Cloud Root Shells
A short selection of Cloud-based Linux Root Shells and their resource limits. Overview: | MEMORY | STORAGE | CPU | comment ------------------+--------+---------+-----+--------- Github Codespace | 32GB | 8GB | 4 | 20Gpbs Git...
Tunnel via Cloudflare to any TCP Service
Cloudflare's cloudflared tunnels are commonly used to 'publish' a web server that runs behind a firewall (e.g. making the webserver accessible from the Internet). Cloudflare restricts the traffic to HTTP-style traffic: It won't allow the publishing o...
LSDR - Linux and Software Defined Radio 101
LSDR - Linux and Software Defined Radio 101 0x00 Preface Having started my journey w/ Linux and SDR in 2012, back then I had to manually compile lots of stuff, sometimes including a dependency hell. Still, there was already alot going on - a growing ...