Alternatives and similar repositories for ARTHookScripts

Users that are interested in ARTHookScripts are comparing it to the libraries listed below

• LLeavesG / Frida-Sigaction-Seccomp
  Frida-Sigaction-Seccomp实现对Android APP系统调用的拦截
  ☆119Updated last year
• Mrack / MemDetection
  计算内存中的libc.so，libart.so的crc与文件中的对比检测apk是否处于异常环境。
  ☆72Updated 2 years ago
• YoooHaaa / Anti
  用于练手的环境检测的demo
  ☆81Updated last year
• tcc0lin / KernelModification
  研究内核改机策略
  ☆63Updated last year
• g2wfw / qbdi-tracer-android
  Android assembly instruction tracing tool
  ☆98Updated 3 months ago
• axhlzy / FridaDebugger
  Single-step debugging of native code using frida, stalker, and semaphore
  ☆80Updated 9 months ago
• xiaotujinbnb / ptrace-seccomp-demo
  一个基于ptrace-seccomp简单的重定向openat的demo
  ☆76Updated 2 years ago
• AndroidReverser-Test / Kernel-Trace
  一个基于uprobe，能同时hook大量用户地址空间函数的kpm内核模块
  ☆150Updated last week
• Chenyangming9 / SoFixer
  ☆83Updated 7 months ago
• xbyl1234 / jni_trace
  android jni trace for arm64 for magisk module!
  ☆53Updated last month
• GaoYuCan / DexPatcher
  2023 年 羊城杯 ezAndroid dex VMP 恢复工具
  ☆36Updated last year
• tcc0lin / awsome-magisk
  关于Magisk生态的研究
  ☆151Updated last year
• xiaotujinbnb / QBDI_trace_demo
  ☆74Updated 4 months ago
• Thehepta / Android-Debug-Inject
  ☆129Updated last week
• SeeFlowerX / frida_dump
  frida dump android elf, support spawn and attach mode
  ☆79Updated last year
• SeeFlowerX / frida-java-stacktrace
  frida打印java调用栈的详细信息
  ☆39Updated 5 months ago
• hackcatml / zygisk-memdump
  A zygisk module that dumps so file from process memory
  ☆88Updated 9 months ago
• Ccccccccvvm / CvmSeccomp
  Seccomp + Signal Intercept SVC
  ☆89Updated last year
• maiyao1988 / ebpf-plugin
  ☆121Updated 2 years ago
• SoyBeanMilkx / IO_Redirect
  apatch内核模块 用于文件重定向
  ☆60Updated 4 months ago
• maoabc / fuckPxxVM
  转换Pxx的vmp文件(check.bin, mw.bin)到.class
  ☆28Updated 2 years ago
• reveny / Android-Library-Remap-Hide
  Remap a library to avoid detection
  ☆126Updated last year
• null-luo / btrace
  btrace：binder_transaction+eBPF+Golang实现通用的Android APP动态行为追踪工具
  ☆181Updated last year
• rev1si0n / android_kernel_oneplus_msm8998
  个人专用 ONEPLUS 5 内核，做了一些基础的反调试修改（从 maps 隐藏特定 lib，最完整最正常的 tracerPid 修改措施）
  ☆81Updated 3 years ago
• onesss19 / Syscall_intercept_arm64
  ☆121Updated 3 years ago
• SeeFlowerX / FGum
  ☆49Updated 2 years ago
• tcc0lin / dirty_algorithm
  常用的加密算法理解以及魔改、对抗思路
  ☆53Updated 2 years ago
• AndroidReverser-Test / ptrace_helper
  一个用于抹去ptrace注入部分文件特征的apatch内核模块
  ☆43Updated 6 months ago
• chroblert / JC-AntiPtrace
  安卓绕过ptrace反调试
  ☆72Updated 4 years ago
• acceleratorCYR / monitorSVC
  monitor svc calls of android
  ☆73Updated 6 years ago