ilammy / ftrace-hook

Related projects: ⓘ

• milabs / khook
  Linux Kernel hooking engine (x86)
  ☆323Updated 4 months ago
• smcdef / kprobe-template
  kprobes template
  ☆50Updated 3 years ago
• ixty / mandibule
  linux elf injector for x86 x86_64 arm arm64
  ☆309Updated 6 years ago
• soulxu / kvmsample
  minivm based on kvm
  ☆142Updated 3 months ago
• kfiros / execmon
  Advanced process execution monitoring utility for linux (procmon like)
  ☆84Updated 8 years ago
• jha / linux-kernel-hook
  A small kernel module that can hook arbitrary syscalls on x86_64
  ☆47Updated 4 years ago
• KVM-VMI / kvm-vmi
  KVM-based Virtual Machine Introspection
  ☆305Updated 2 weeks ago
• elfmaster / ftrace
  POSIX Function tracing
  ☆324Updated 7 years ago
• elfmaster / libelfmaster
  Secure ELF parsing/loading library for forensics reconstruction of malware, and robust reverse engineering tools
  ☆408Updated last month
• emptymonkey / ptrace_do
  A ptrace library for easy syscall injection in Linux.
  ☆165Updated 2 months ago
• ouadev / proc_maps_parser
  a lightweight library to parse Linux's /proc/[pid]/maps file, which contains the memory map of a process
  ☆119Updated 3 weeks ago
• WeiJiLab / kernel-hook-framework
  hook or replace arbitary linux kernel functions in runtime, supporting arm32, arm64, x86, x86_64
  ☆145Updated 2 weeks ago
• GiantVM / KVM-Annotation
  抽出KVM代码进行注释
  ☆60Updated 6 years ago
• AonCyberLabs / Cexigua
  Linux based inter-process code injection without ptrace(2)
  ☆235Updated 7 years ago
• david942j / kvm-kernel-example
  Examples for: Learning KVM - implement your own kernel
  ☆351Updated last year
• misc0110 / PTEditor
  A small library to modify all page-table levels of all processes from user space for x86_64 and ARMv8.
  ☆230Updated last month
• pathtofile / bad-bpf
  A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29
  ☆530Updated 2 months ago
• pathtofile / bpf-hookdetect
  Dectect syscall hooking using eBPF
  ☆139Updated last year
• haiwei-li / study
  Study blog. Much more about KVM/Kernel/Virtualization.
  ☆65Updated this week
• dpw / kvm-hello-world
  A minimal kvm example
  ☆471Updated 2 years ago
• GiantVM / doc
  documents
  ☆162Updated last year
• pmem / vltrace
  Tool tracing syscalls in a fast way using eBPF linux kernel feature
  ☆98Updated last year
• node3 / Linux-Security-Module
  Kernel programming: This is a simple kernel module implementation for enforcing access control policies using Linux Security Module frame…
  ☆28Updated 6 years ago
• yasukata / zpoline
  system call hook for Linux
  ☆447Updated this week
• abysamross / simple-linux-kernel-tcp-client-server
  A simple in-kernel tcp client and server implemented as LKMs
  ☆50Updated 5 months ago
• elfmaster / kdress
  Transform vmlinuz into a fully debuggable vmlinux that can be used with /proc/kcore
  ☆121Updated 4 years ago
• Rtoax / linux-5.10.13
  Linux kernel fully commented
  ☆65Updated this week
• croemheld / lkm-rootkit
  A LKM rootkit for most newer kernel versions.
  ☆170Updated 7 years ago
• a13xp0p0v / kernel-build-containers
  Containers for building the Linux kernel or other software with many different compilers
  ☆184Updated this week
• MikhailProg / elf
  small elf loader
  ☆111Updated 3 months ago