jrelo / fs_monitoring
dnotify,inotify, and fanotify example code from http://www.lanedo.com/filesystem-monitoring-linux-kernel/
☆15Updated 7 years ago
Related projects ⓘ
Alternatives and complementary repositories for fs_monitoring
- a linux kernel function inline hooking library☆28Updated 7 years ago
- A simple fanotify example for watching events on a filesystem.☆13Updated 9 years ago
- Using ftrace for function hooking in Linux kernel☆252Updated 3 years ago
- ELF shared library import table patching for function redirection.☆188Updated 4 years ago
- load so file into current memory space and run function☆80Updated 7 years ago
- ☆20Updated 4 years ago
- A small set of functions to set hardware breakpoints.☆14Updated 7 years ago
- a lightweight library to parse Linux's /proc/[pid]/maps file, which contains the memory map of a process☆121Updated last month
- Secure ELF parsing/loading library for forensics reconstruction of malware, and robust reverse engineering tools☆410Updated last week
- hook or replace arbitary linux kernel functions in runtime, supporting arm32, arm64, x86, x86_64☆165Updated 2 months ago
- Example of how to use the ptrace(2) system call to call a userspace method.☆145Updated 5 years ago
- Dump page tables on various OSes and analyze them☆28Updated 8 years ago
- Core of Linux hooking engine for ARM architecture☆22Updated 6 years ago
- ☆25Updated 3 years ago
- Examples for Linux ptrace(2)☆136Updated 7 months ago
- A Linux kernel module that locates the system call table in memory and hooks uname. Contributions welcome!☆58Updated 11 years ago
- This is simple kernel module can get and replace any linux syscall. Nowadays needs some hacks, on x86 platform. Can be used on ARM and x8…☆11Updated 11 years ago
- ☆47Updated 4 years ago
- a quick open/close/ioctl/read/write/free function hooker☆186Updated 7 years ago
- Kernel programming: This is a simple kernel module implementation for enforcing access control policies using Linux Security Module frame…☆29Updated 6 years ago
- ELF obfuscator☆63Updated 9 years ago
- dlopen from memory☆213Updated 9 years ago
- Original code about binary encryption from phrack☆65Updated 12 years ago
- Project to analyse & test Android Binder IPC machnism as well as its related C++ library interface☆46Updated 12 years ago
- simple inline-hook framework works for x86, x64, arm and thumb☆135Updated 6 years ago
- Dynamic creation and update of ELF files, or: an allocator for JIT compilers☆32Updated 10 months ago
- kprobes template☆51Updated 3 years ago
- demos-linux is a project to demo and explore the Linux user space C/C++ API☆91Updated this week
- A small kernel module that can hook arbitrary syscalls on x86_64☆48Updated 5 years ago