Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/saaph/eBPF_processor

An IDA processor for eBPF bytecode
https://github.com/saaph/eBPF_processor

Last synced: 13 days ago
JSON representation

An IDA processor for eBPF bytecode

Awesome Lists containing this project

README

        

# eBPF IDA Proc

This is an IDA Processor that can be used to disassemble eBPF bytecode. It was developed for a challenge. As such, it hasn't been tested with any other target than the crackme-esque filter I developed it for.

## Author

Clément Berthaux - clement (dot) berthaux (at) synacktiv (dot) com

## Installation

You just need to place `ebpf.py` in your `IDA_ROOT\procs` folder.

![Example of filter opened in IDA](img/bpf_ida.png)