Furtex: Post-exploitation, rootkit and evasion research toolkit for Linux
Furtex is a Linux post-exploitation and evasion research toolkit built on io_uring and eBPF technologies, containing over 100 tools organized across file operations, BPF tooling, EDR evasion, and Falco detection bypass capabilities. The toolkit requires Linux kernel 5.4 or higher and specific development tools (gcc, clang, libbpf-dev) to compile, with various tools requiring different Linux capabilities like CAP_BPF and CAP_PERFMON. The project is intended exclusively for authorized security research and red team engagements.
Read Full Article →