Alternatives and similar repositories for mandibule:

Users that are interested in mandibule are comparing it to the libraries listed below

• AonCyberLabs / Cexigua
  Linux based inter-process code injection without ptrace(2)
  ☆241Updated 7 years ago
• milabs / khook
  Linux Kernel hooking engine (x86)
  ☆338Updated 2 months ago
• elfmaster / saruman
  ELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection)
  ☆129Updated 6 years ago
• ilammy / ftrace-hook
  Using ftrace for function hooking in Linux kernel
  ☆263Updated 3 years ago
• zznop / drow
  Injects code into ELF executables post-build
  ☆226Updated 8 months ago
• croemheld / lkm-rootkit
  A LKM rootkit for most newer kernel versions.
  ☆172Updated 7 years ago
• elfmaster / libelfmaster
  Secure ELF parsing/loading library for forensics reconstruction of malware, and robust reverse engineering tools
  ☆430Updated 3 months ago
• elfmaster / dt_infect
  ELF Shared library injector using DT_NEEDED precedence infection. Acts as a permanent LD_PRELOAD
  ☆109Updated 4 years ago
• emptymonkey / ptrace_do
  A ptrace library for easy syscall injection in Linux.
  ☆174Updated 7 months ago
• xpn / ssh-inject
  A ptrace POC by hooking SSH to reveal provided passwords
  ☆181Updated 7 years ago
• 0x00pf / 0x00sec_code
  Code for my 0x00sec.org posts
  ☆315Updated 4 years ago
• NoviceLive / research-rootkit
  LibZeroEvil & the Research Rootkit project.
  ☆595Updated 3 years ago
• k0keoyo / kDriver-Fuzzer
  ☆466Updated 6 years ago
• SheLLVM / SheLLVM
  A collection of LLVM transform and analysis passes to write shellcode in regular C
  ☆370Updated last year
• koutto / ioctlbf
  Windows Kernel Drivers fuzzer
  ☆306Updated 7 years ago
• dismantl / linux-injector
  Utility for injecting executable code into a running process on x86/x64 Linux
  ☆261Updated 8 years ago
• 0xKira / qemu-vm-escape
  ☆283Updated 4 years ago
• nccgroup / idahunt
  idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro
  ☆384Updated last year
• jha / linux-kernel-hook
  A small kernel module that can hook arbitrary syscalls on x86_64
  ☆49Updated 5 years ago
• k0keoyo / Some-Kernel-Fuzzing-Paper
  Some kernel fuzzing paper about windows and linux
  ☆255Updated 7 years ago
• infosecguerrilla / ReflectiveSOInjection
  Reflective SO injection is a library injection technique in which the concept of reflective programming is employed to perform the loadin…
  ☆116Updated 8 years ago
• sam-b / windows_kernel_resources
  Papers, blogposts, tutorials etc for learning about Windows kernel exploitation, internals and (r|b)ootkits
  ☆388Updated 5 years ago
• zeropointdynamics / zelos
  A comprehensive binary emulation and instrumentation platform.
  ☆411Updated 2 years ago
• howknows / awesome-windows-security-development
  awesome-windows-security-development
  ☆169Updated 6 years ago
• lucasg / findrpc
  Idapython script to carve binary for internal RPC structures
  ☆230Updated 10 months ago
• can1357 / CVE-2018-8897
  Arbitrary code execution with kernel privileges using CVE-2018-8897.
  ☆410Updated 6 years ago
• push0ebp / ALLirt
  Tool that converts All of libc to signatures for IDA Pro FLIRT Plugin. and utility make sig with FLAIR easily
  ☆163Updated 2 years ago
• gaffe23 / linux-inject
  Tool for injecting a shared object into a Linux process
  ☆1,147Updated 2 years ago
• sourque / louis
  Linux EDR written in Golang and based on eBPF.
  ☆234Updated 2 years ago
• ixty / xarch_shellcode
  Cross Architecture Shellcode in C
  ☆200Updated 8 years ago