digilolnet / pint-c2

eBPF evading C2

Pint C2

This is a C2 that uses various techniques to evade from eBPF based security monitoring.

Features

• Userland exec / reflective ELF loading.
• Event spamming / resource exhaustion.
• Sockets and TCP connection using io_uring.
• Map tampering (TODO).

Commands

• ulexec [command]
• memfd [command]
• noise [on/off]