Linux Session Sniffer using eBPF
eBPF is a powerul technology that makes the kernel programmable in a safe manner.
In this video, I will show you how eBPF can be used as an offensive security tool.
// Tags
#ethicalhacking #ebpf #kernel #linux #sniffing
// Chapters
0:00 - Intro
0:49 - eBPF refresher
1:49 - eBPF program demo
3:20 - Understanding Linux pseudo terminals
6:27 - Understanding how the attack works
7:26 - Analyzing the eBPF progrm
// Links
ptysnoop.bt: https://github.com/hackerschoice/bpfh...
bpftrace: https://github.com/iovisor/bpftrace/r...