{"adoption": {"forks": 183, "observed_at": "2026-08-28T04:05:20.907460+00:00", "stars": 1677}, "canonical_url": "https://ross.abutalabs.com/products/boopkit", "card": {"archived": false, "artifact_type": "cli-tool", "description": "Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.", "domain": ["security", "penetration-testing", "operating-systems"], "enriched": true, "function": ["security", "networking"], "health_score": 20, "homepage": null, "language": "C", "license": "Apache-2.0", "license_family": "permissive", "maturity": "maintenance", "member_repos": ["krisnova/boopkit"], "name": "krisnova/boopkit", "platform": ["cli"], "pushed_at": "2023-10-19T07:43:18+00:00", "repo": "krisnova/boopkit", "stars": 1677, "tags": ["ebpf", "rootkit", "backdoor", "reverse-shell", "tcp", "red-team", "security-research", "linux"], "topics": ["tcp", "linux-kernel-hacking", "ebpf", "security"], "urls": [], "use_cases": ["demonstrate eBPF-based backdoor techniques in security research", "test detection capabilities against eBPF rootkits", "spawn a reverse shell over TCP on a server you already control", "study Linux kernel eBPF process hiding and obfuscation", "red team lab exercises for privileged post-exploitation"], "what_it_is": "boopkit is a Linux rootkit and backdoor written in C that uses eBPF to enable remote command execution over raw TCP. It requires prior privileged access on the target server and includes a client tool (boopkit-boop) for triggering reverse shells and RCE.", "when_to_avoid": ["you need a legitimate remote access tool like SSH for operations", "you lack prior privileged access on the target system", "you cannot accept the legal and operational risks of running rootkit software", "your environment is production and not an authorized testing lab"], "when_to_choose": ["you are a security researcher studying eBPF-based rootkits on Linux", "you need a lab tool to test endpoint detection of eBPF backdoors", "you want to demonstrate risks of eBPF abuse in privileged environments"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/boopkit", "repo": "krisnova/boopkit", "role": "main", "score": 23}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:05:20.907460+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T03:41:36.590887+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1ccd5d4f22cdaddce2f569c5d6b711aeb880017a305d17ed6648588112d90bf2", "fetched_at": "2026-08-28T04:05:20.907460+00:00", "kind": "readme", "missing": false, "url": "https://github.com/krisnova/boopkit"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:05:20.907460+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T03:41:36.590887+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1ccd5d4f22cdaddce2f569c5d6b711aeb880017a305d17ed6648588112d90bf2", "fetched_at": "2026-08-28T04:05:20.907460+00:00", "kind": "readme", "missing": false, "url": "https://github.com/krisnova/boopkit"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T03:41:36.590887+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1ccd5d4f22cdaddce2f569c5d6b711aeb880017a305d17ed6648588112d90bf2", "fetched_at": "2026-08-28T04:05:20.907460+00:00", "kind": "readme", "missing": false, "url": "https://github.com/krisnova/boopkit"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:05:20.907460+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:05:20.907460+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:05:20.907460+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T03:41:36.590887+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1ccd5d4f22cdaddce2f569c5d6b711aeb880017a305d17ed6648588112d90bf2", "fetched_at": "2026-08-28T04:05:20.907460+00:00", "kind": "readme", "missing": false, "url": "https://github.com/krisnova/boopkit"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:05:20.907460+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:05:20.907460+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T03:41:36.590887+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1ccd5d4f22cdaddce2f569c5d6b711aeb880017a305d17ed6648588112d90bf2", "fetched_at": "2026-08-28T04:05:20.907460+00:00", "kind": "readme", "missing": false, "url": "https://github.com/krisnova/boopkit"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:05:20.907460+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:05:20.907460+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:05:20.907460+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T03:41:36.590887+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1ccd5d4f22cdaddce2f569c5d6b711aeb880017a305d17ed6648588112d90bf2", "fetched_at": "2026-08-28T04:05:20.907460+00:00", "kind": "readme", "missing": false, "url": "https://github.com/krisnova/boopkit"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:05:20.907460+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:05:20.907460+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T03:41:36.590887+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1ccd5d4f22cdaddce2f569c5d6b711aeb880017a305d17ed6648588112d90bf2", "fetched_at": "2026-08-28T04:05:20.907460+00:00", "kind": "readme", "missing": false, "url": "https://github.com/krisnova/boopkit"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T03:41:36.590887+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1ccd5d4f22cdaddce2f569c5d6b711aeb880017a305d17ed6648588112d90bf2", "fetched_at": "2026-08-28T04:05:20.907460+00:00", "kind": "readme", "missing": false, "url": "https://github.com/krisnova/boopkit"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T03:41:36.590887+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1ccd5d4f22cdaddce2f569c5d6b711aeb880017a305d17ed6648588112d90bf2", "fetched_at": "2026-08-28T04:05:20.907460+00:00", "kind": "readme", "missing": false, "url": "https://github.com/krisnova/boopkit"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T03:41:36.590887+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1ccd5d4f22cdaddce2f569c5d6b711aeb880017a305d17ed6648588112d90bf2", "fetched_at": "2026-08-28T04:05:20.907460+00:00", "kind": "readme", "missing": false, "url": "https://github.com/krisnova/boopkit"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 100, "rhythm": 8}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 1617, "days_push": 1049, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 23, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}