Mrack / MemDetectionLinks
计算内存中的libc.so，libart.so的crc与文件中的对比检测apk是否处于异常环境。
☆72Updated 2 years ago
Alternatives and similar repositories for MemDetection
Users that are interested in MemDetection are comparing it to the libraries listed below
Sorting:
- Frida-Sigaction-Seccomp实现对Android APP系统调用的拦截☆119Updated last year
- 用于练手的环境检测的demo☆87Updated last year
- apatch内核模块 用于文件重定向☆69Updated 5 months ago
- android jni trace for arm64 for magisk module!☆81Updated this week
- frida runtime resolves smali☆85Updated 3 months ago
- 一个基于ptrace-seccomp简单的重定向openat的demo☆76Updated 2 years ago
- 研究内核改机策略☆63Updated last year
- 修改app包名,实现随机包名,☆52Updated 3 years ago
- Dynamic java method hook for Android，Implemented by jvmti☆53Updated 3 weeks ago
- Remap a library to avoid detection☆127Updated last year
- 一个基于uprobe，能同时hook大量用户地址空间函数的kpm内核模块☆157Updated last month
- 检测app是否被frida/xposed注入☆55Updated 5 months ago
- Android aarch64 rootkit☆79Updated last month
- apatch内核模块用于隐藏mountxxx & maps & smaps的指定内容☆57Updated 6 months ago
- This is a tool used to inject so to any app by ptrace.☆85Updated 2 years ago
- Overt是一款功能强大的Android设备安全检测工具☆153Updated 2 weeks ago
- ☆87Updated 9 months ago
- ☆49Updated 2 years ago
- 关于Magisk生态的研究☆152Updated last year
- 安卓插件化开发 学习☆15Updated 4 months ago
- 一个用于抹去ptrace注入部分文件特征的apatch内核模块☆47Updated 7 months ago
- ☆19Updated 8 months ago
- Android assembly instruction tracing tool☆111Updated 4 months ago
- 个人专用 ONEPLUS 5 内核，做了一些基础的反调试修改（从 maps 隐藏特定 lib，最完整最正常的 tracerPid 修改措施）☆81Updated 3 years ago
- dump dex for android 14☆61Updated 11 months ago
- 转换Pxx的vmp文件(check.bin, mw.bin)到.class☆27Updated 2 years ago
- ☆80Updated 6 months ago
- Use frida-gum's stalker for tracing☆37Updated 2 months ago
- ☆45Updated last year
- A zygisk module that dumps so file from process memory☆91Updated 11 months ago