8000 GitHub - saaph/eBPF_processor: An IDA processor for eBPF bytecode
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

saaph/eBPF_processor

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 

Repository files navigation

eBPF IDA Proc

This is an IDA Processor that can be used to disassemble eBPF bytecode. It was developed for a challenge. As such, it hasn't been tested with any other target than the crackme-esque filter I developed it for.

Author

Clément Berthaux - clement (dot) berthaux (at) synacktiv (dot) com

Installation

You just need to place ebpf.py in your IDA_ROOT\procs folder.

Example of filter opened in IDA

About

An IDA processor for eBPF bytecode

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

0