PoC showing a method to hide syscalls on XNU (arm64 macOS and iOS) from static analysis
☆34Oct 3, 2022Updated 3 years ago
Alternatives and similar repositories for XNU-syscall-hiding-PoC
Users that are interested in XNU-syscall-hiding-PoC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A guide☆16Apr 7, 2022Updated 4 years ago
- GitHub Actions to analyse file using IDA☆36Nov 21, 2024Updated last year
- some enhanced llvm pass☆17May 20, 2026Updated 4 months ago
- SherlockElf is a powerful tool designed for both static and dynamic analysis of Android ELF binaries and dynamic iOS Macho-O binaries (ex…☆118Updated this week
- Guessed headers of non-public Apple SDK☆64Feb 19, 2026Updated 7 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- LLVM Obfuscation Pass☆23Dec 2, 2024Updated last year
- pointer obfuscation☆28Mar 7, 2018Updated 8 years ago
- Android web based memory scanner & editor.☆19Jul 29, 2026Updated last month
- Lightweight *OS hooking library with no dependencies except for libsystem☆113Sep 19, 2026Updated last week
- An Android native libraries injection tool. supports arch arm/arm64/x86/x86_64. Support Android 4.x to 11.0.☆74Dec 24, 2021Updated 4 years ago
- XNU Patch Finder (based on ChOma)☆71Aug 11, 2026Updated last month
- 去除BR混淆 Deobfuscation BR☆102Jun 20, 2024Updated 2 years ago
- ☆15Jun 26, 2020Updated 6 years ago
- ios 后台无限运行☆25May 1, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- LZBITMAP compression library☆58Jan 18, 2023Updated 3 years ago
- Resolve calls for internal unity engine functions☆19Oct 24, 2019Updated 6 years ago
- ☆59Aug 30, 2023Updated 3 years ago
- Search running processes on iOS for instances of a given objc class.☆55Jan 3, 2025Updated last year
- Log all syscalls executed by a process (iOS / checkra1n / xnuspy)☆73May 29, 2022Updated 4 years ago
- iOS runtime dylib injection tool☆275Sep 19, 2026Updated last week
- This is an IDA plugin to recover class information from C++ binary.☆18Aug 4, 2020Updated 6 years ago
- linux x86_64 and arm64 syscall hook☆22Dec 9, 2023Updated 2 years ago
- Android assembly instruction tracing tool☆142Apr 17, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Pure Swift tweak framework (iOS 12-16, macOS 11-13)☆52May 14, 2023Updated 3 years ago
- ☆31Sep 25, 2023Updated 3 years ago
- ☆18Dec 12, 2021Updated 4 years ago
- Android NDK Toolchains with llvm based obfuscator☆17May 14, 2021Updated 5 years ago
- A IDA plugin to show ARM MSRs nicely☆84Jan 4, 2023Updated 3 years ago
- Draw on Canvas based Overlay with RootService☆20Apr 13, 2024Updated 2 years ago
- Kdebug events and ktraces parser☆38Jul 4, 2026Updated 2 months ago
- ☆19Sep 11, 2026Updated 2 weeks ago
- iOS的越狱和非越狱环境下直接对指定地址函数进行hook的框架，支持宏定义直接切换☆61May 15, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- arm64 inline hook☆33Mar 22, 2026Updated 6 months ago
- Code to extracts stable ARM CPU register values directly from system hardware for fingerprinting device.☆27Jul 23, 2025Updated last year
- Remote library injection into Android processes, then hooking via various methods☆70Mar 27, 2026Updated 6 months ago
- A cross-platform library to parse Objective-C type encoding.☆42Sep 1, 2024Updated 2 years ago
- deobfuscation BR☆56Mar 4, 2024Updated 2 years ago
- Moved: https://codeberg.org/koutheir/selinux☆24Mar 27, 2024Updated 2 years ago
- an obfuscator based on LLVM which can obfuscate the program execution trajectory☆104Mar 15, 2021Updated 5 years ago