← Latest products

Poolnarc

catch hidden Linux cryptominers from two eBPF hooks. Behavioral hidden-cryptominer detector for Linux in eBPF — flags processes talking to mining-pool ports while spoofing kernel-thread names. No signatures, no agent, no cloud. CO-RE portable.

Open source

6 stars · GitHubexternal site

Visit github.comexternal site

Reactions (1)

Similar products

by description similarity

  1. Spliff

    github.com

    Correlating XDP and TLS via eBPF (Building a Linux EDR)

    Hacker News5 pts

  2. eBPF-powered L4 package dropper

    github.com

    eBPF/XDP packet filtering for Linux.

    Hacker News11 pts

  3. An eBPF kernel guard for vTPM access

    github.com

    eBPF-based Linux kernel guard that lets only allowlisted binaries use the TPM.

    Hacker News5 pts

  4. Bomfather

    github.com

    eBPF Runtime Security

    Hacker News7 pts

  5. Gecit

    github.com

    DPI bypass using eBPF sock_ops, no proxy or VPN

    Hacker News9 pts