ilammy / ftrace-hookLinks
Using ftrace for function hooking in Linux kernel
☆279Updated 4 years ago
Alternatives and similar repositories for ftrace-hook
Users that are interested in ftrace-hook are comparing it to the libraries listed below
Sorting:
- Linux Kernel hooking engine (x86)☆352Updated 7 months ago
- A small kernel module that can hook arbitrary syscalls on x86_64☆52Updated 5 years ago
- kprobes template☆57Updated 4 years ago
- linux elf injector for x86 x86_64 arm arm64☆338Updated 7 years ago
- POSIX Function tracing☆337Updated 7 years ago
- a linux kernel function inline hooking library☆30Updated 7 years ago
- KVM-based Virtual Machine Introspection☆344Updated 9 months ago
- A ptrace library for easy syscall injection in Linux.☆181Updated last year
- Linux based inter-process code injection without ptrace(2)☆251Updated 7 years ago
- Study blog. Much more about KVM/Kernel/Virtualization.☆74Updated 2 months ago
- Examples for: Learning KVM - implement your own kernel☆377Updated last year
- Secure ELF parsing/loading library for forensics reconstruction of malware, and robust reverse engineering tools☆442Updated 2 months ago
- Transform vmlinuz into a fully debuggable vmlinux that can be used with /proc/kcore☆130Updated 9 months ago
- a lightweight library to parse Linux's /proc/[pid]/maps file, which contains the memory map of a process☆128Updated 10 months ago
- hook or replace arbitary linux kernel functions in runtime, supporting arm32, arm64, x86, x86_64☆199Updated last month
- ☆28Updated 3 years ago
- Advanced process execution monitoring utility for linux (procmon like)☆85Updated 9 years ago
- Dectect syscall hooking using eBPF☆159Updated 2 years ago
- A network interface for GDB for Linux Kernel☆71Updated 2 years ago
- A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29☆631Updated last year
- Examples of using BPF ring buffer APIs☆131Updated 4 years ago
- A LKM rootkit for most newer kernel versions.☆177Updated 7 years ago
- A small library to modify all page-table levels of all processes from user space for x86_64 and ARMv8.☆264Updated 3 months ago
- Code snippets from the O'Reilly book☆18Updated 3 years ago
- minivm based on kvm☆152Updated last year
- The system call intercepting library☆649Updated 6 months ago
- system call hook for Linux☆601Updated 6 months ago
- Tool tracing syscalls in a fast way using eBPF linux kernel feature☆98Updated 2 years ago
- Simple Intel CPU processor tracing on Linux☆349Updated 2 years ago
- A tiny debugger implement the GDB Remote Serial Protocol. Can work on i386, x86_64, ARM and PowerPC.☆166Updated 2 years ago