Three Types of Remote Access Software Explained
Three types of remote access solve different problems. Pick relay-based tools for one-offs, peer-to-peer for speed, or RMM platforms for fleet management.
Category: Security Tools
CVE-2013-6282 Fix: ARM Kernel Bounds Check Patch
CVE-2013-6282 has been patched in upstream kernels for over a decade. Learn why scanners still flag it and how to confirm your system is actually fixed.
Detect Port Scans with eBPF
The eBPF port scanning detection approach shows how kernel-level programs can answer TCP SYNs without leaving the fast path. I guide you through a compact XDP example that reads Ethernet, IPv4, and TCP headers in the kernel. You will see how a simple program spots a SYN and replies with a SYN-ACK to emulate an […]
Detect Shell with eBPF
I use eBPF shell detection to catch stealthy programs that land inside the kernel and then hide from normal tools. You will see why watching load-time events matters more than chasing artifacts later. The kernel grants deep visibility into system activity, but that same access gives attackers a way to hide a reverse shell or […]
Operationalizing Falco: eBPF Driver Setup and Alert Routing
Falco requires modern eBPF drivers, DaemonSet deployment, rule tuning, and Falcosidekick integration to catch runtime threats in production clusters.