---
id: 4415
title: "Defeating eBPF Uprobe Monitoring"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/defeating-ebpf-uprobe-monitoring.html"
published_at: "2022-08-29T22:00:00Z"
tags: ["cloud", "linux", "exploitation", "kernel", "monitoring", "ebpf", "uprobes"]
phying_url: "https://phying.com/item/4415"
lang: en
---

# Defeating eBPF Uprobe Monitoring

## Summary

Research into eBPF uprobe monitoring on Linux: the basics of hooking userland programs, and flaws found in uprobes that allow monitored programs to evade this monitoring.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2022-08-29T22:00:00Z
- **Original:** https://blog.quarkslab.com/defeating-ebpf-uprobe-monitoring.html
- **Phying News:** https://phying.com/item/4415