ilammy / ftrace-hook
Using ftrace for function hooking in Linux kernel
☆261Updated 3 years ago
Alternatives and similar repositories for ftrace-hook:
Users that are interested in ftrace-hook are comparing it to the libraries listed below
- Linux Kernel hooking engine (x86)☆338Updated last month
- A small kernel module that can hook arbitrary syscalls on x86_64☆49Updated 5 years ago
- kprobes template☆56Updated 4 years ago
- linux elf injector for x86 x86_64 arm arm64☆327Updated 6 years ago
- Dectect syscall hooking using eBPF☆143Updated last year
- Linux based inter-process code injection without ptrace(2)☆241Updated 7 years ago
- Examples of using BPF ring buffer APIs☆122Updated 4 years ago
- A ptrace library for easy syscall injection in Linux.☆174Updated 6 months ago
- Transform vmlinuz into a fully debuggable vmlinux that can be used with /proc/kcore☆127Updated 3 months ago
- hook or replace arbitary linux kernel functions in runtime, supporting arm32, arm64, x86, x86_64☆178Updated 3 weeks ago
- Advanced process execution monitoring utility for linux (procmon like)☆84Updated 8 years ago
- a linux kernel function inline hooking library☆30Updated 7 years ago
- a lightweight library to parse Linux's /proc/[pid]/maps file, which contains the memory map of a process☆124Updated 4 months ago
- POSIX Function tracing☆324Updated 7 years ago
- Secure ELF parsing/loading library for forensics reconstruction of malware, and robust reverse engineering tools☆430Updated 2 months ago
- KVM-based Virtual Machine Introspection☆320Updated 2 months ago
- A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29☆572Updated 6 months ago
- Examples for Linux ptrace(2)☆137Updated 9 months ago
- A network interface for GDB for Linux Kernel☆65Updated last year
- A small library to modify all page-table levels of all processes from user space for x86_64 and ARMv8.☆248Updated 3 months ago
- A LKM rootkit for most newer kernel versions.☆172Updated 7 years ago
- Tool tracing syscalls in a fast way using eBPF linux kernel feature☆98Updated last year
- Linux Kernel Runtime Integrity with eBPF☆172Updated last year
- 抽出KVM代码进行注释☆61Updated 7 years ago
- Study blog. Much more about KVM/Kernel/Virtualization.☆70Updated this week
- small elf loader☆133Updated 8 months ago
- ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits☆125Updated last year
- My exploring in linux kernel☆64Updated this week
- Linux kernel fully commented☆70Updated last week
- system call hook for Linux☆532Updated 3 weeks ago