Alternatives and similar repositories for feature

Users that are interested in feature are comparing it to the libraries listed below

• SoyBeanMilkx / IO_Redirect
  apatch内核模块 用于文件重定向
  ☆69Updated 5 months ago
• SoyBeanMilkx / InjectDetect
  检测app是否被frida/xposed注入
  ☆55Updated 5 months ago
• AndroidReverser-Test / mount_hidder
  一个用于隐藏apatch root挂载文件特征的内核模块
  ☆92Updated 6 months ago
• Mrack / MemDetection
  计算内存中的libc.so，libart.so的crc与文件中的对比检测apk是否处于异常环境。
  ☆72Updated 2 years ago
• AndroidReverser-Test / ptrace_helper
  一个用于抹去ptrace注入部分文件特征的apatch内核模块
  ☆47Updated 7 months ago
• reveny / Android-Library-Remap-Hide
  Remap a library to avoid detection
  ☆127Updated last year
• ri-char / zygisk-dump-dex
  A zygisk module that hooks `libdexfile.so` to dump dex
  ☆83Updated 9 months ago
• 2481849298 / kernel_proc_hack
  ☆35Updated 8 months ago
• tcc0lin / KernelModification
  研究内核改机策略
  ☆63Updated last year
• xbyl1234 / jni_trace
  android jni trace for arm64 for magisk module!
  ☆81Updated this week
• LLeavesG / Frida-Sigaction-Seccomp
  Frida-Sigaction-Seccomp实现对Android APP系统调用的拦截
  ☆119Updated last year
• thouger / kernel_learn
  ☆19Updated 8 months ago
• fuqiuluo / android-wuwa
  Android aarch64 rootkit
  ☆79Updated last month
• cinit / JvmXposed
  A Xposed-like library for runtime Java method interception in OpenJDK VM.
  ☆75Updated last week
• eirv / DisableLSPosed
  让 LSPosed 失效并恢复所有被 LSPlant hook 的方法
  ☆22Updated 6 months ago
• JingMatrix / Demo
  A demo app to detect Zygote injections
  ☆90Updated this week
• PShocker / HideAPK
  修改app包名,实现随机包名,
  ☆52Updated 3 years ago
• hackcatml / zygisk-memdump
  A zygisk module that dumps so file from process memory
  ☆91Updated 11 months ago
• rev1si0n / android_kernel_oneplus_msm8998
  个人专用 ONEPLUS 5 内核，做了一些基础的反调试修改（从 maps 隐藏特定 lib，最完整最正常的 tracerPid 修改措施）
  ☆81Updated 3 years ago
• ngiokweng / ng1ok-linker
  自實現Linker的小Demo
  ☆70Updated 3 months ago
• AndroidReverser-Test / Kernel-Trace
  一个基于uprobe，能同时hook大量用户地址空间函数的kpm内核模块
  ☆157Updated last month
• w296488320 / HunterUpdate
  ☆63Updated this week
• SafaSafari / bypass_libpairipcore
  with this repo you can bypass libpairipcore tamper and signature protection
  ☆42Updated 4 months ago
• fuqiuluo / kernel-hook-syscalls
  A Kernel module to break the kernel read-only to modify the syscall_table purpose (only in the Linux Arm64 6.6 Kernel test runs properly)…
  ☆30Updated 7 months ago
• Ylarod / ddk
  内核驱动开发工具包 (Kernel Driver Development Kit)
  ☆28Updated 2 weeks ago
• ni-qiuqiu / apatch_kpm_read
  apatch kpm 模块通用内核读写内存 linux kernel read only support ARM64（based apatch）
  ☆43Updated 3 months ago
• eirv / ElfLoader
  Loading ELF in android using pure java / 使用纯 java 在 android 上加载 ELF
  ☆40Updated 9 months ago
• Party233 / Sensor2Everything
  Android Sensor HOOK based on Dobby(libsensorservice.so HAL)
  ☆25Updated 8 months ago
• apkunpacker / DetectZygisk
  A POC to detect zygisk
  ☆62Updated 3 months ago
• SoyBeanMilkx / FileLock
  A linux(android) kernel module that prevents important files from being deleted
  ☆17Updated 7 months ago