kfiros / execmonLinks
Advanced process execution monitoring utility for linux (procmon like)
☆85Updated 9 years ago
Alternatives and similar repositories for execmon
Users that are interested in execmon are comparing it to the libraries listed below
Sorting:
- Trusted Path Execution (TPE) Linux Kernel Module☆163Updated 6 years ago
- Shadow-Box: Lightweight and Practical Kernel Protector for x86 (Presented at BlackHat Asia 2017/2018, beVX 2018 and HITBSecConf 2017)☆188Updated 6 years ago
- ELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection)☆138Updated 7 years ago
- A ptrace library for easy syscall injection in Linux.☆184Updated last year
- ELF packer - x86_64☆74Updated 10 years ago
- Simple ELF tools written to demonstrate libelfmaster capabilities.☆41Updated 7 years ago
- linux elf injector for x86 x86_64 arm arm64☆344Updated 7 years ago
- sample linux x86_64 ELF virus☆54Updated 7 years ago
- Transform vmlinuz into a fully debuggable vmlinux that can be used with /proc/kcore☆132Updated last year
- Linux Kernel hooking engine (x86)☆385Updated 3 months ago
- a linux kernel function inline hooking library☆30Updated 8 years ago
- Linux Exploits☆140Updated 10 years ago
- Heap analysis tooling for ptmalloc☆46Updated 3 years ago
- Linux Rootkit Scanner☆88Updated 4 years ago
- POSIX Function tracing☆339Updated 8 years ago
- A small kernel module that can hook arbitrary syscalls on x86_64☆52Updated 6 years ago
- ☆47Updated 7 years ago
- Linux based inter-process code injection without ptrace(2)☆255Updated 8 years ago
- Using ftrace for function hooking in Linux kernel☆294Updated 4 years ago
- ld-linux code injector☆50Updated 14 years ago
- extended core file snapshot format☆229Updated 7 years ago
- Obfuscates dynamic symbol table☆135Updated 7 years ago
- This is the new ftrace (https://github.com/elfmaster/ftrace) - Much faster, better resolution but not complete yet! :)☆110Updated 7 years ago
- Any useful windbg plugins I've written.☆117Updated 7 years ago
- A Linux kernel module that locates the system call table in memory and hooks uname. Contributions welcome!☆58Updated 12 years ago
- Implementation of the SMM rootkit "The Watcher"☆131Updated 3 years ago
- midgetpack is a multiplatform secure ELF packer☆208Updated 11 years ago
- Runtime Prevention of Return-Oriented Programming Attacks☆82Updated 10 years ago
- Meltdown/Spectre PoC src collection.☆508Updated 8 years ago
- Process dump to executable ELF for linux☆106Updated 4 years ago