Darknet - Hacking Tools, Hacker News & Cyber Security Follow Caracal – Rust eBPF Rootkit for Stealthy Post-Exploitation Caracal is a Rust-based eBPF rootkit that hides BPF programs, maps, and processes, ideal for stealthy post-exploitation and red team operations. https://www.darknet.org.uk/2025/07/caracal-rust-ebpf-rootkit-for-stealthy-post-exploitation/ darknet.org.uk