Alternatives and similar repositories for ftrace-hook

Users that are interested in ftrace-hook are comparing it to the libraries listed below

• milabs / khook
  Linux Kernel hooking engine (x86)
  ☆371Updated last month
• jha / linux-kernel-hook
  A small kernel module that can hook arbitrary syscalls on x86_64
  ☆52Updated 6 years ago
• smcdef / kprobe-template
  kprobes template
  ☆60Updated 4 years ago
• KVM-VMI / kvm-vmi
  KVM-based Virtual Machine Introspection
  ☆353Updated last month
• elfmaster / ftrace
  POSIX Function tracing
  ☆338Updated 8 years ago
• ixty / mandibule
  linux elf injector for x86 x86_64 arm arm64
  ☆338Updated 7 years ago
• misc0110 / PTEditor
  A small library to modify all page-table levels of all processes from user space for x86_64 and ARMv8.
  ☆270Updated 6 months ago
• WeiJiLab / kernel-inline-hook-framework
  hook or replace arbitary linux kernel functions in runtime, supporting arm32, arm64, x86, x86_64
  ☆208Updated 4 months ago
• cppcoffee / inl_hook
  a linux kernel function inline hooking library
  ☆30Updated 8 years ago
• ouadev / proc_maps_parser
  a lightweight library to parse Linux's /proc/[pid]/maps file, which contains the memory map of a process
  ☆133Updated last year
• elfmaster / libelfmaster
  Secure ELF parsing/loading library for forensics reconstruction of malware, and robust reverse engineering tools
  ☆449Updated 6 months ago
• david942j / kvm-kernel-example
  Examples for: Learning KVM - implement your own kernel
  ☆379Updated 2 years ago
• haiwei-li / study
  Study blog. Much more about KVM/Kernel/Virtualization.
  ☆77Updated 6 months ago
• sysprogs / kgdboe
  A network interface for GDB for Linux Kernel
  ☆71Updated 3 months ago
• pmem / vltrace
  Tool tracing syscalls in a fast way using eBPF linux kernel feature
  ☆99Updated 2 years ago
• pathtofile / bpf-hookdetect
  Dectect syscall hooking using eBPF
  ☆165Updated 2 years ago
• saBPF-project / sabpf-kernel
  ☆28Updated 3 years ago
• GiantVM / KVM-Annotation
  抽出KVM代码进行注释
  ☆60Updated 7 years ago
• strozfriedberg / Cexigua
  Linux based inter-process code injection without ptrace(2)
  ☆254Updated 8 years ago
• DavadDi / linux-observability-with-bpf
  Code snippets from the O'Reilly book
  ☆18Updated 3 years ago
• node3 / Linux-Security-Module
  Kernel programming: This is a simple kernel module implementation for enforcing access control policies using Linux Security Module frame…
  ☆32Updated 7 years ago
• kfiros / execmon
  Advanced process execution monitoring utility for linux (procmon like)
  ☆85Updated 9 years ago
• andikleen / simple-pt
  Simple Intel CPU processor tracing on Linux
  ☆351Updated 2 years ago
• elfmaster / kdress
  Transform vmlinuz into a fully debuggable vmlinux that can be used with /proc/kcore
  ☆132Updated last year
• emptymonkey / ptrace_do
  A ptrace library for easy syscall injection in Linux.
  ☆181Updated last year
• RichardWeiYang / kernel_exploring
  My exploring in linux kernel
  ☆73Updated this week
• shubham0d / Immutable-file-linux
  A small fun project to protect a file from writing using ftrace hooking.
  ☆24Updated 4 years ago
• pmem / syscall_intercept
  The system call intercepting library
  ☆653Updated 10 months ago
• croemheld / lkm-rootkit
  A LKM rootkit for most newer kernel versions.
  ☆179Updated 8 years ago
• poliva / ldpreloadhook
  a quick open/close/ioctl/read/write/free function hooker
  ☆190Updated 8 years ago