fuqiuluo / kernel-hook-syscallsLinks
A Kernel module to break the kernel read-only to modify the syscall_table purpose (only in the Linux Arm64 6.6 Kernel test runs properly).
☆25Updated 5 months ago
Alternatives and similar repositories for kernel-hook-syscalls
Users that are interested in kernel-hook-syscalls are comparing it to the libraries listed below
Sorting:
- Android aarch64 kernel driver module providing efficient memory operations, touch simulation and IPC. Features include fast memory remapp…☆53Updated 4 months ago
- github action for building android GKI 2.0(12/13/14/15/16) kernel module.☆36Updated 5 months ago
- ☆35Updated 6 months ago
- Mirror of https://gitee.com/SmartSmallBoy/hardware-breakpoint☆52Updated last year
- with this repo you can bypass libpairipcore tamper and signature protection☆40Updated 2 months ago
- A rootkit for Android.☆54Updated last year
- ☆17Updated last year
- Android assembly instruction tracing tool☆38Updated 2 months ago
- A kernel module to read and write memory in a remote process.☆63Updated 10 months ago
- 一个基于uprobe,能同时hook大量用户地址空间函数的kpm内核模块☆103Updated this week
- 自實現Linker的小Demo☆70Updated last month
- Capture input events of any android application☆46Updated last year
- Draw on Canvas based Overlay with RootService☆20Updated last year
- 一个用于在安卓平台上进行主动调用来dump unity手游的so模块。☆51Updated 2 months ago
- A zygisk module that dumps so file from process memory☆86Updated 9 months ago
- ☆58Updated 3 years ago
- 研究内核改机策略☆60Updated last year
- 计算内存中的libc.so,libart.so的crc与文件中的对比检测apk是否处于异常环境。☆71Updated 2 years ago
- Remap a library to avoid detection☆125Updated last year
- 自定义linker加载so☆84Updated last month
- Inotify监听测试☆34Updated 3 years ago
- hwBreakpoint Test App☆19Updated 2 years ago
- tprt ollvm 反混淆 修改 binja il☆43Updated 10 months ago
- 去除BR混淆 Deobfuscation BR☆77Updated last year
- 一个用于抹去ptrace注入部分文件特征的apatch内核模块☆40Updated 5 months ago
- ☆20Updated 9 months ago
- this is Android Custom Linker by Android12 LinkerSourcesCode☆42Updated last year
- 用于练手的环境检测的demo☆81Updated last year
- 个人专用 ONEPLUS 5 内核,做了一些基础的反调试修改(从 maps 隐藏特定 lib,最完整最正常的 tracerPid 修改措施)☆80Updated 3 years ago
- apatch内核模块用于隐藏mountxxx & maps & smaps的指定内容☆49Updated 4 months ago