计算内存中的libc.so,libart.so的crc与文件中的对比检测apk是否处于异常环境。
☆85Dec 13, 2022Updated 3 years ago
Alternatives and similar repositories for MemDetection
Users that are interested in MemDetection are comparing it to the libraries listed below
Sorting:
- 研究内核改机策略☆70Mar 13, 2024Updated 2 years ago
- 劫持Zygote在App启动前注入so☆350Jan 22, 2026Updated last month
- 去除BR混淆 Deobfuscation BR☆92Jun 20, 2024Updated last year
- 用于练手的环境检测的demo☆92Jan 3, 2024Updated 2 years ago
- 读取本地so文件的符号的偏移☆19Jan 7, 2023Updated 3 years ago
- dump dex for android 14☆66Oct 4, 2024Updated last year
- frida runtime resolves smali☆94Jan 24, 2026Updated last month
- apatch内核模块 用于文件重定向☆76Mar 19, 2025Updated last year
- Remap a library to avoid detection☆132Feb 1, 2024Updated 2 years ago
- A POC to detect zygisk☆71May 26, 2025Updated 9 months ago
- Frida-Sigaction-Seccomp实现对Android APP系统调用的拦截☆127Jan 26, 2024Updated 2 years ago
- ☆388Mar 29, 2025Updated 11 months ago
- ☆97Mar 4, 2025Updated last year
- Yet Another Unix Injector with support for Android/Android Emulator i686/x64/arm/aarch64☆62Updated this week
- Code injection on Android without ptrace☆283Mar 20, 2024Updated 2 years ago
- ☆37Jun 25, 2025Updated 8 months ago
- ☆58Nov 10, 2021Updated 4 years ago
- ☆71Jun 2, 2023Updated 2 years ago
- ☆175Jun 27, 2025Updated 8 months ago
- ☆34Dec 30, 2024Updated last year
- This is a dynamic instrumentation tool that can inject xposed module into any appliation on rooted Android devices.☆159Feb 4, 2026Updated last month
- APatch KernelPatch QEMU Debug Environment☆21Sep 9, 2024Updated last year
- 关于Magisk生态的研究☆161Apr 29, 2024Updated last year
- Xposed免root注入so方案, 支持android各个版本☆246May 1, 2024Updated last year
- btrace:binder_transaction+eBPF+Golang实现通用的Android APP动态行为追踪工具☆200Jun 15, 2024Updated last year
- Attd QBDI Tracer☆105Jan 9, 2026Updated 2 months ago
- System Call Hook for ARM64☆217Jan 19, 2026Updated 2 months ago
- Seccomp + Signal Intercept SVC☆93Aug 18, 2023Updated 2 years ago
- Android aarch64 kernel rootkit(driver module)☆143Dec 10, 2025Updated 3 months ago
- ☆29Jun 20, 2025Updated 9 months ago
- android jni trace for arm64 for magisk module!☆92Nov 28, 2025Updated 3 months ago
- 一个Android通用svc跟踪以及hook方案——Frida-Seccomp☆649May 14, 2024Updated last year
- 一个IDA插件,利用frida-stalker在加载so时打印出所有函数调用,解决frida-trace无法在so加载时trace的问题☆286May 16, 2025Updated 10 months ago
- A library for hiding and retrieving imports in ELF binaries.☆192Apr 18, 2025Updated 11 months ago
- 获取更详细的Java调用栈,即使清除调试信息并混淆也能知道那个方法报错☆19May 24, 2024Updated last year
- 一个自定义注入so的脚手架,现在已经支持了界面化使用。☆627Dec 26, 2025Updated 2 months ago
- Android assembly instruction tracing tool☆146Apr 17, 2025Updated 11 months ago
- Single-step debugging of native code using frida, stalker, and semaphore☆87Oct 9, 2024Updated last year
- apatch kpm 模块通用内核读写内存 linux kernel read only support ARM64(based apatch)☆66Jan 13, 2026Updated 2 months ago