A rootkit for Android.
☆63Jun 6, 2024Updated last year
Alternatives and similar repositories for kmem
Users that are interested in kmem are comparing it to the libraries listed below
Sorting:
- 劫持Zygote在App启动前注入so☆350Jan 22, 2026Updated last month
- A kernel module to read and write memory in a remote process.☆77Aug 27, 2024Updated last year
- Draw on Canvas based Overlay with RootService☆19Apr 13, 2024Updated last year
- 去除BR混淆 Deobfuscation BR☆92Jun 20, 2024Updated last year
- Xposed免root注入so方案, 支持android各个版本☆246May 1, 2024Updated last year
- tprt ollvm 反混淆 修改 binja il☆50Sep 5, 2024Updated last year
- Mirror of https://gitee.com/SmartSmallBoy/hardware-breakpoint☆62May 20, 2024Updated last year
- Android system call hook☆229Jan 22, 2025Updated last year
- apatch kpm 模块通用内核读写内存 linux kernel read only support ARM64（based apatch）☆66Jan 13, 2026Updated 2 months ago
- ☆34Dec 30, 2024Updated last year
- btrace：binder_transaction+eBPF+Golang实现通用的Android APP动态行为追踪工具☆202Jun 15, 2024Updated last year
- AntiOllvm Fla with Fake Runtime☆183Jan 8, 2025Updated last year
- Android aarch64 kernel driver module providing efficient memory operations, touch simulation and IPC. Features include fast memory remapp…☆99Aug 25, 2025Updated 6 months ago
- 自實現Linker的小Demo☆76Jun 5, 2025Updated 9 months ago
- ☆105Dec 5, 2024Updated last year
- Android Kernel Vulnerability (CVE-2019-2215) temporary root PoC☆14Dec 21, 2023Updated 2 years ago
- 研究内核改机策略☆70Mar 13, 2024Updated 2 years ago
- ☆175Jun 27, 2025Updated 8 months ago
- A library for hiding and retrieving imports in ELF binaries.☆192Apr 18, 2025Updated 11 months ago
- Android aarch64 kernel rootkit(driver module)☆143Dec 10, 2025Updated 3 months ago
- 一个基于uprobe，能同时hook大量用户地址空间函数的kpm内核模块☆189Feb 13, 2026Updated last month
- APatch KernelPatch QEMU Debug Environment☆21Sep 9, 2024Updated last year
- silent syscall hooking without modifying sys_call_table/handlers via patching exception handler☆153Apr 22, 2024Updated last year
- android8 arm64 注入方案☆37Jul 11, 2021Updated 4 years ago
- 详细说明及演示MMU相关原理及过程(用于理解Linux内核Root Kernelpatch)☆23Jun 17, 2024Updated last year
- A demo app to detect Zygote injections☆112Jan 29, 2026Updated last month
- ☆148Sep 9, 2025Updated 6 months ago
- ☆96Feb 11, 2026Updated last month
- 个人专用 ONEPLUS 5 内核， 做了一些基础的反调试修改（从 maps 隐藏特定 lib，最完整最正常的 tracerPid 修改措施）☆82Oct 7, 2021Updated 4 years ago
- Linux ARM64内核硬件进程内存读写驱动、硬件断点调试驱动。硬件级读写Linux进程内存、硬件级下断点。☆902Dec 4, 2025Updated 3 months ago
- Single-step debugging of native code using frida, stalker, and semaphore☆87Oct 9, 2024Updated last year
- Modify Android linker to provide loading module and hook function☆465Oct 13, 2025Updated 5 months ago
- ☆98Mar 4, 2025Updated last year
- 一个通过控制指定内存段权限设置而实现阻止app自身inline hook行为的内核模块☆40Mar 13, 2025Updated last year
- github action for building android GKI 2.0(12/13/14/15/16) kernel module.☆51Jan 25, 2025Updated last year
- dump dex for android 14☆66Oct 4, 2024Updated last year
- Android native SO and DEX dumper.☆75Aug 22, 2025Updated 6 months ago
- Code injection on Android without ptrace☆283Mar 20, 2024Updated 2 years ago
- Kernel mode to user mode so injection☆94Nov 6, 2020Updated 5 years ago