𓆣 π”—ΜΆπ”’ΜΆπ”±ΜΆπ”°ΜΆπ”±ΜΆπ”žΜΆπ” ΜΆπ”¨ΜΆ 𓆣
141 subscribers
304 photos
7 videos
12 files
59 links
Download Telegram
And for the new followers that joined, technically from raycast. If you scroll more to the top ... I can explain.
𓆣 π”—ΜΆπ”’ΜΆπ”±ΜΆπ”°ΜΆπ”±ΜΆπ”žΜΆπ” ΜΆπ”¨ΜΆ 𓆣
I mean I put the people I stalk in level and tiers, by Age, relationship, your relationship with me, how much secure are you on your on personal info and your profession and where you work. So if we ever talk and I sent you any link then yeah try grading your…
Nah not shady like him but you know, if let say hypothetically I want to go for a bug bounty or smthing on that company or that company is no good and you end up working there well, I will use you to take them down could be credentials or hand you maybe some links or a file or Trojan. Then once I am in I will leave a backdoor and return with a different perspective so it won't lead back to you, new device, new name new everything apply as an employer add my self, and then use my own employment as an atack vector and maybe leak or delete that company's files. And delete any trace of me using your credentials ever. And also log in only on mid night and do that stuff so that the attack timing makes it I am from a foreign country with fake values and norms or maybe make it like a Ransome where, there are a lot of ways, I am just not interested in making my self a target now, I mean yes saying this only already can expose me but, how would they know, if it I never listed the method or how I will do it, just take this as an example.
❀1
So anyways I will be working on a new project soon.
❀‍πŸ”₯1
What do you mean good luck everyone, I guess I should post less I guess or mor formal way and stuff.
I am building,

Real-Time Kernel Security Engine

The problem: Traditional security agents run in user space, consuming 5–10% of total CPU and introducing latency that modern cloud-native systems can't afford.

A zero-overhead kernel security observer using eBPF (Extended Berkeley Packet Filter) using C for eBPF bytecode and C++ for user-space control planes.


β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
β”‚ USER SPACE (C++20 Daemon) β”‚
β”‚ β”‚
β”‚ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”‚
β”‚ β”‚ process_monitor.skel.h β”‚ ─────► β”‚ RAII Engine Loop β”‚ β”‚
β”‚ β”‚ (Auto-gen Skeleton) β”‚ β”‚ (ring_buffer__poll) β”‚ β”‚
β”‚ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”¬β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β”‚
β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β–²β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”Όβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
β”‚ β”‚ BPF Map Updates
RingBuf β”‚ β”‚ (Blacklist / Rules)
β”‚ β–Ό
β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”Όβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
β”‚ β”‚ KERNEL SPACE (C / eBPF) β”‚
β”‚ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”΄β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”‚
β”‚ β”‚ BPF_MAP_TYPE_RINGBUF β”‚ β”‚
β”‚ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β–²β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β”‚
β”‚ β”‚ bpf_ringbuf_submit β”‚
β”‚ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”΄β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”‚
β”‚ β”‚ process_monitor.bpf.c β”‚ β”‚
β”‚ β”‚ SEC("tp/sys_enter_execve") β”‚ β”‚
β”‚ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β–²β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β”‚
β”‚ β”‚ β”‚
β”‚ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”΄β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”‚
β”‚ β”‚ Linux Kernel / Syscall Tracepointβ”‚ β”‚
β”‚ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β”‚
β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜


well the mechanism is injecting eBPF bytecode directly into the Linux kernel to trace kernel syscalls, memory allocation patterns, and network socket activity in real time.
❀‍πŸ”₯2πŸ‘1πŸ”₯1
Going live tomorrow for a code build from zero.

Time: IDK, I guess when I wake up.

@Tetstack
⚑3πŸ”₯1
SO for today's stuff on the K-Sentinel I was able to map it out more.