ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

eBPF Golang binaries TLS sniffer

Application Kernel for Containers

eBPF implementation that runs on top of Windows

Cloud native networking and network security

LMP provides an eBPF Supermarket for developers, including eBPF tools, open-source projects based on eBPF, eBPF learning materials, Linux kernel learning materials, and more.

Simple shell script to "clone" X.509 certificates

mTCP: A Highly Scalable User-level TCP Stack for Multicore Systems

Data Plane Development Kit

A lightweight, fast and reliable tun2socks

Graceful process restarts in Go

eBPF Developer Tutorial: Learning eBPF Step by Step with Examples

Native macOS networking for QEMU using vmnet.framework and socket networking.

Simple example for using the macos vmnet framework

eBPF-based Linux high-performance transparent proxy solution.

本工具可以基于已知网站 ssl 证书的信息生成新的自签名证书，保持签发者、有效期、序列号、域名等一致，用于伪装流量。