반응형

-공식문서-
https://ebpf.io/blog/
https://github.com/lizrice/ebpf-beginners
https://sanjit-bhat.github.io/assets/pdf/ebpf-verifier-range-analysis22.pdf -> verifier 논문
https://www.tcpdump.org/papers/bpf-usenix93.pdf -> user단에서 제일 볼만한 논문이라고 개인적으로 여김
https://www.kerno.io/blog/programming-the-kernel-with-ebpf
https://nakryiko.com/posts/bpf-portability-and-co-re/ -> for compile
https://zplin.me/papers/GREBE.pdf
https://kim-dragon.tistory.com/273 -> 국문은 요분께 ㄹㅇ..
https://man7.org/linux/man-pages/man2/bpf.2.html -> linux kernel manual page
https://www.collabora.com/news-and-blog/blog/2019/04/05/an-ebpf-overview-part-1-introduction/ -> 시리즈글 part 1~5
https://pr0gr4m.github.io/linux/kernel/netfilter/ -> netfilter 국문

-exploitation-
https://thehackernews.com/2022/06/quick-and-simple-bpfdoor-explained.html
https://stdnoerr.github.io/writeup/2022/08/21/eBPF-exploitation-(ft.-D-3CTF-d3bpf).html
https://blog.hexrabbit.io/2021/02/07/ZDI-20-1440-writeup/
https://blog.tofile.dev/2021/08/01/bad-bpf.html
https://jinb-park.github.io/Exploit-Linux-kernel-eBPF-with-side-channel.pdf -> side channel attack
https://www.blackhat.com/docs/eu-16/materials/eu-16-Reshetova-Randomization-Can't-Stop-BPF-JIT-Spray-wp.pdf -> spray attack
https://xz.aliyun.com/t/6212?time__1311=n4%2BxnD0DRDBDy77e0QD%2Fia%2Bw07LtG%3DDgiGYD&alichlgref=https%3A%2F%2Fwww.google.com%2F -> 원본은 wei wu님이었나.. p4nda좌님의 글이었던걸로 기억함

https://a1ex.online/2021/08/15/eBPF%E6%BA%90%E7%A0%81%E9%98%85%E8%AF%BB%E7%AC%94%E8%AE%B0/


-ebpf fuzzer-
https://github.com/google/buzzer

-flamegraph-
https://github.com/brendangregg/FlameGraph -> 데이터 시각화

반응형

'ebpf' 카테고리의 다른 글

CO-RE, BTF, and Libbpf  (0) 2024.02.11
The bpf() System Call  (0) 2024.01.25
Anatomy of an eBPF Program  (0) 2024.01.24
eBPF programming  (0) 2024.01.09
Troubleshooting - learning eBPF  (0) 2024.01.01

+ Recent posts