Alternatives and similar repositories for mandibule

Users that are interested in mandibule are comparing it to the libraries listed below

• strozfriedberg / Cexigua
  Linux based inter-process code injection without ptrace(2)
  ☆255Updated 8 years ago
• croemheld / lkm-rootkit
  A LKM rootkit for most newer kernel versions.
  ☆180Updated 8 years ago
• milabs / khook
  Linux Kernel hooking engine (x86)
  ☆384Updated 2 months ago
• zznop / drow
  Injects code into ELF executables post-build
  ☆237Updated last year
• 0xKira / qemu-vm-escape
  ☆285Updated 5 years ago
• SheLLVM / SheLLVM
  A collection of LLVM transform and analysis passes to write shellcode in regular C
  ☆380Updated 2 years ago
• howknows / awesome-windows-security-development
  awesome-windows-security-development
  ☆176Updated 7 years ago
• elfmaster / saruman
  ELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection)
  ☆138Updated 7 years ago
• ilammy / ftrace-hook
  Using ftrace for function hooking in Linux kernel
  ☆292Updated 4 years ago
• elfmaster / libelfmaster
  Secure ELF parsing/loading library for forensics reconstruction of malware, and robust reverse engineering tools
  ☆449Updated 3 weeks ago
• jha / linux-kernel-hook
  A small kernel module that can hook arbitrary syscalls on x86_64
  ☆52Updated 6 years ago
• lucasg / findrpc
  Idapython script to carve binary for internal RPC structures
  ☆239Updated last year
• k0keoyo / kDriver-Fuzzer
  ☆477Updated 7 years ago
• googleprojectzero / bochspwn
  A Bochs-based instrumentation project designed to log kernel memory references, to identify "double fetches" and other OS vulnerabilities
  ☆343Updated 6 years ago
• NoviceLive / research-rootkit
  LibZeroEvil & the Research Rootkit project.
  ☆598Updated 4 years ago
• push0ebp / ALLirt
  Tool that converts All of libc to signatures for IDA Pro FLIRT Plugin. and utility make sig with FLAIR easily
  ☆168Updated 3 years ago
• koutto / ioctlbf
  Windows Kernel Drivers fuzzer
  ☆376Updated 8 years ago
• infosecguerrilla / ReflectiveSOInjection
  Reflective SO injection is a library injection technique in which the concept of reflective programming is employed to perform the loadin…
  ☆117Updated 9 years ago
• maroueneboubakri / lscan
  lscan is a library identification tool on statically linked/stripped binaries
  ☆405Updated 5 years ago
• yaoyumeng / adore-ng
  linux rootkit adapted for 2.6 and 3.x
  ☆217Updated 10 years ago
• googleprojectzero / bochspwn-reloaded
  A Bochs-based instrumentation performing kernel memory taint tracking to detect disclosure of uninitialized memory to ring 3
  ☆310Updated 6 years ago
• tinysec / windows-syscall-table
  windows syscall table from xp ~ 10 rs4
  ☆356Updated 7 years ago
• nccgroup / idahunt
  idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro
  ☆387Updated 2 years ago
• can1357 / CVE-2018-8897
  Arbitrary code execution with kernel privileges using CVE-2018-8897.
  ☆420Updated 7 years ago
• 0x00pf / 0x00sec_code
  Code for my 0x00sec.org posts
  ☆330Updated 5 years ago
• wmliang / pe-afl
  ☆251Updated 5 years ago
• yellowbyte / analysis-of-anti-analysis
  writings on anti-reverse engineering.
  ☆289Updated 4 years ago
• dismantl / linux-injector
  Utility for injecting executable code into a running process on x86/x64 Linux
  ☆270Updated 9 years ago
• ixty / xarch_shellcode
  Cross Architecture Shellcode in C
  ☆208Updated 9 years ago
• elfmaster / dt_infect
  ELF Shared library injector using DT_NEEDED precedence infection. Acts as a permanent LD_PRELOAD
  ☆112Updated 5 years ago