ixty / mandibule
linux elf injector for x86 x86_64 arm arm64
☆332Updated 6 years ago
Alternatives and similar repositories for mandibule:
Users that are interested in mandibule are comparing it to the libraries listed below
- Linux based inter-process code injection without ptrace(2)☆245Updated 7 years ago
- Injects code into ELF executables post-build☆228Updated 10 months ago
- ☆468Updated 7 years ago
- Linux Kernel hooking engine (x86)☆340Updated 4 months ago
- A collection of LLVM transform and analysis passes to write shellcode in regular C☆372Updated last year
- ELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection)☆134Updated 7 years ago
- Tool that converts All of libc to signatures for IDA Pro FLIRT Plugin. and utility make sig with FLAIR easily☆163Updated 2 years ago
- Secure ELF parsing/loading library for forensics reconstruction of malware, and robust reverse engineering tools☆435Updated last month
- A Bochs-based instrumentation project designed to log kernel memory references, to identify "double fetches" and other OS vulnerabilities☆335Updated 5 years ago
- A LKM rootkit for most newer kernel versions.☆174Updated 7 years ago
- Using ftrace for function hooking in Linux kernel☆267Updated 4 years ago
- idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro☆385Updated last year
- Examples of leaking Kernel Mode information from User Mode on Windows☆597Updated 7 years ago
- Windows Kernel Drivers fuzzer☆340Updated 8 years ago
- ☆284Updated 4 years ago
- load so file into current memory space and run function☆105Updated 8 years ago
- lscan is a library identification tool on statically linked/stripped binaries☆404Updated 4 years ago
- Some kernel fuzzing paper about windows and linux☆255Updated 7 years ago
- ELF Shared library injector using DT_NEEDED precedence infection. Acts as a permanent LD_PRELOAD☆110Updated 5 years ago
- writings on anti-reverse engineering.☆285Updated 3 years ago
- A Bochs-based instrumentation performing kernel memory taint tracking to detect disclosure of uninitialized memory to ring 3☆302Updated 6 years ago
- Arbitrary code execution with kernel privileges using CVE-2018-8897.☆411Updated 6 years ago
- windows syscall table from xp ~ 10 rs4☆353Updated 6 years ago
- Papers, blogposts, tutorials etc for learning about Windows kernel exploitation, internals and (r|b)ootkits☆394Updated 5 years ago
- Cross Architecture Shellcode in C☆200Updated 8 years ago
- Code for my 0x00sec.org posts☆319Updated 4 years ago
- Tiny loaders for various binary formats.☆236Updated 8 years ago
- A small kernel module that can hook arbitrary syscalls on x86_64☆52Updated 5 years ago
- LibZeroEvil & the Research Rootkit project.☆594Updated 3 years ago
- Reflective SO injection is a library injection technique in which the concept of reflective programming is employed to perform the loadin…☆116Updated 8 years ago