{"id":19928396,"url":"https://github.com/ursachec/ectg","last_synced_at":"2026-02-26T08:15:34.018Z","repository":{"id":137593303,"uuid":"586570416","full_name":"ursachec/ectg","owner":"ursachec","description":"eBPF Canarytoken trigger","archived":false,"fork":false,"pushed_at":"2023-01-15T19:30:32.000Z","size":56,"stargazers_count":4,"open_issues_count":0,"forks_count":0,"subscribers_count":3,"default_branch":"main","last_synced_at":"2025-05-03T10:42:22.406Z","etag":null,"topics":["canarytokens","ebpf"],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ursachec.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-01-08T15:54:19.000Z","updated_at":"2023-01-16T22:18:52.000Z","dependencies_parsed_at":null,"dependency_job_id":"9321efa0-3aab-4ead-97c5-a7a093c26650","html_url":"https://github.com/ursachec/ectg","commit_stats":null,"previous_names":["ursachec/ectg"],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/ursachec/ectg","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ursachec%2Fectg","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ursachec%2Fectg/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ursachec%2Fectg/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ursachec%2Fectg/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ursachec","download_url":"https://codeload.github.com/ursachec/ectg/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ursachec%2Fectg/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29853699,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-25T22:37:40.667Z","status":"online","status_checked_at":"2026-02-26T02:00:06.774Z","response_time":89,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["canarytokens","ebpf"],"created_at":"2024-11-12T22:37:05.899Z","updated_at":"2026-02-26T08:15:33.982Z","avatar_url":"https://github.com/ursachec.png","language":"C","funding_links":[],"categories":[],"sub_categories":[],"readme":"# ectg\n\n_eBPF Canarytoken trigger_.\n\nCLI tool which triggers DNS based Canarytokens when `execve` syscalls are invoked for programs at specified paths.\n\n### Requirements\n\n- go 1.18/1.19\n- Linux 4.9+\n- clang-11/clang-14\n\n### Build \u0026 Run\n\nFirst, generate a DNS Canarytoken at https://canarytokens.org/generate.\n\nAfterwards:\n```shell\n$ make generate\n$ go build\n$ sudo ./ectg -hostname 6j4n7c2flo71qa0r9g0simq2r.canarytokens.com -paths /usr/bin/id,/usr/bin/whoami,/usr/bin/hostname\n```\n\nWith `ectg` running, execute `whoami` in a separate shell session — the Canarytoken will trigger and an email will be sent to the address you entered when creating the token.\n\n### References\n\n- https://github.com/cilium/ebpf\n- https://blog.thinkst.com/2020/06/canarytokens-org-quick-free-detection-for-the-masses-2.html\n- https://ebpf.io/\n- https://github.com/thinkst/canaryfy\n- https://blog.thinkst.com/2022/08/canaries-as-network-motion-sensors.html\n- https://github.com/redcanaryco/redcanary-ebpf-sensor\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fursachec%2Fectg","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fursachec%2Fectg","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fursachec%2Fectg/lists"}