Snooping on libpam (openssh auth, passwd) with Golang and eBPF

Snooping on libpam (openssh auth, passwd) with Golang and eBPF
In the vast and complex landscape of software security, safeguarding sensitive information remains a paramount concern for developers and security professionals alike. Among the myriad of challenges, securely managing and protecting credentials during authentication processes stands out as a critical vulnerability point. Traditional security measures often fall short in providing real-time insights into how credentials are handled and potentially exposed within applications, especially those relying on widely used authentication frameworks like PAM (Pluggable Authentication Modules).
Read more →

Building an XDP eBPF Program with C and Golang: A Step-by-Step Guide

Building an XDP eBPF Program with C and Golang: A Step-by-Step Guide
Building an XDP eBPF Program with C and Golang: A Step-by-Step Guide is a comprehensive tutorial that walks readers through the process of building an XDP (eXpress Data Path) eBPF (extended Berkeley Packet Filter) program using C and Golang. The article provides a clear overview of XDP and eBPF, highlights the project’s goal of creating a simple chaos engineering tool, and guides readers through each step of the development process. From setting up the development environment to writing the XDP eBPF program in C and the accompanying Golang application, readers will gain hands-on experience and learn important concepts such as packet processing, perf event handling, and statistics tracking. By the end of the article, readers will have a solid understanding of how to leverage XDP and eBPF for networking and performance optimization purposes
Read more →

Golang debugging

Golang debugging
I was asked recently how to debug a Golang application and after-the-fact thought I should spend some time detailing the steps incase it’s of benefit to others. In short I use a debugger called Delve
Read more →