Alternatives and similar repositories for linux_syscall_hook

Users that are interested in linux_syscall_hook are comparing it to the libraries listed below

• 3intermute / arm64_silent_syscall_hook
  silent syscall hooking without modifying sys_call_table/handlers via patching exception handler
  ☆147Updated last year
• maskelihileci / IDA_Ollvm-unflattener
  Control Flow Flattening Deobfuscator for Obfuscator-LLVM as a plugin for IDA Pro.
  ☆88Updated 8 months ago
• za233 / IDADeflat
  deflat plugins for ida pro
  ☆42Updated 2 years ago
• junknet / kernel-debugger
  内核硬件调试器模块，rootkit操作 dump
  ☆35Updated 3 years ago
• Rhydon1337 / linux-kernel-so-injector
  Kernel mode to user mode so injection
  ☆91Updated 5 years ago
• gmh5225 / android-kernel-driver-template
  A GKI Android kernel driver(ARMv8.3) template compiled by llvm-msvc
  ☆39Updated last year
• lockedbyte / so_loader
  In-memory ELF shared library loading
  ☆45Updated 2 years ago
• cs1ime / AndroidSuperInject
  Injecting into SELinux-protected system service processes under root on Android.
  ☆50Updated last year
• Ylarod / Buer-Obfuscator
  A WIP Obfuscator based on llvm14
  ☆33Updated 3 years ago
• zhuzhu-Top / deobf
  tprt ollvm 反混淆 修改 binja il
  ☆49Updated last year
• codetronik / CodeLabyrinth
  LLVM Obfuscation Pass
  ☆24Updated last year
• bluesadi / debogus
  Deobfuscate OLLVM Bogus Control Flow via angr
  ☆68Updated 4 years ago
• Mrack / kmem
  A rootkit for Android.
  ☆58Updated last year
• 0xjacklove / xflower
  deobfuscation BR
  ☆53Updated last year
• rednaga / frida-stack
  Getting better stacks and backtraces in Frida
  ☆56Updated 2 weeks ago
• cbwang505 / unicorn-whpx
  跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…
  ☆77Updated last year
• KpwnZ / sllvm-obfuscator
  Implementation of sllvm obfuscator
  ☆66Updated 3 years ago
• hackcatml / frida-watchpoint-tutorial
  Frida's setHardwareWatchpoint tutorial
  ☆62Updated last year
• Mrack / tracer-rs
  使用 frida stalker 实现的 trace
  ☆29Updated 3 years ago
• gmh5225 / AndroidDriveSignity
  AndroidDriveSignity is a Python utility designed to bypass driver signature verification in Android kernel(ARMv8.3), facilitating the loa…
  ☆64Updated last year
• nzcv / arm64-mmu
  详细说明及演示MMU相关原理及过程(用于理解Linux内核Root Kernelpatch)
  ☆23Updated last year
• vrolife / mypower
  ☆71Updated 2 years ago
• wszxl516 / syscall_hook
  linux x86_64 and arm64 syscall hook
  ☆23Updated 2 years ago
• abcz316 / replaceOllvmElfSymCom
  本工具用于解决ollvm编译出来的Linux驱动文件，加载进内核会报错“please compile with -fno-common”的问题
  ☆38Updated 4 years ago
• stdhu / kernel-inline-hook
  linux kernel inline hook
  ☆138Updated 3 years ago
• kp7742 / ida-actions
  GitHub Actions to analyse file using IDA
  ☆35Updated last year
• Ylarod / SignalTracer
  A kernel module for tracing signal
  ☆31Updated 2 years ago
• EEEEhex / detx
  deobf tx libtprt's obfuscation
  ☆54Updated last year
• ShinoLeah / eHook
  A Simple uprobe Hook Framework
  ☆64Updated 8 months ago
• thomasxm / Akira-obfuscator
  Another LLVM-obfuscator based on LLVM-17. A fork of Arkari
  ☆109Updated last year