PoC showing a method to hide syscalls on XNU (arm64 macOS and iOS) from static analysis
☆34Oct 3, 2022Updated 4 years ago
Alternatives and similar repositories for XNU-syscall-hiding-PoC
Users that are interested in XNU-syscall-hiding-PoC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Process active symbol dumper for advanced shellcode analysis☆13Apr 5, 2026Updated 7 months ago
- GitHub Actions to analyse file using IDA☆36Nov 21, 2024Updated last year
- some enhanced llvm pass☆17May 20, 2026Updated 5 months ago
- SherlockElf is a powerful tool designed for both static and dynamic analysis of Android ELF binaries and dynamic iOS Macho-O binaries (ex…☆120Updated this week
- pointer obfuscation☆28Mar 7, 2018Updated 8 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Log all syscalls executed by a process (iOS / checkra1n / xnuspy)☆74May 29, 2022Updated 4 years ago
- LLVM Obfuscation Pass☆25Dec 2, 2024Updated last year
- monitor the ios syscall and hide the syscall☆10Dec 26, 2022Updated 3 years ago
- Lightweight *OS hooking library with no dependencies except for libsystem☆117Oct 4, 2026Updated last month
- 去除BR混淆 Deobfuscation BR☆102Jun 20, 2024Updated 2 years ago
- Guessed headers of non-public Apple SDK☆65Feb 19, 2026Updated 8 months ago
- Android web based memory scanner & editor.☆19Jul 29, 2026Updated 3 months ago
- Resolve calls for internal unity engine functions☆19Oct 24, 2019Updated 7 years ago
- ☆15Jun 26, 2020Updated 6 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Fast SIMD-accelerated memory scanner for Frida — in-process and cross-process (PID).☆16May 24, 2026Updated 5 months ago
- Kobold: Evaluating Decentralized Access Control for Remote NSXPC Methods on iOS☆11Jun 6, 2020Updated 6 years ago
- ☆18Dec 12, 2021Updated 4 years ago
- LZBITMAP compression library☆59Jan 18, 2023Updated 3 years ago
- An Android native libraries injection tool. supports arch arm/arm64/x86/x86_64. Support Android 4.x to 11.0.☆74Dec 24, 2021Updated 4 years ago
- linux x86_64 and arm64 syscall hook☆22Dec 9, 2023Updated 2 years ago
- Search running processes on iOS for instances of a given objc class.☆55Jan 3, 2025Updated last year
- Android assembly instruction tracing tool☆142Apr 17, 2025Updated last year
- This is an IDA plugin to recover class information from C++ binary.☆18Aug 4, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Draw on Canvas based Overlay with RootService☆20Apr 13, 2024Updated 2 years ago
- Modern Jailbreak Detection Demo☆131Sep 10, 2026Updated last month
- Android NDK Toolchains with llvm based obfuscator☆17May 14, 2021Updated 5 years ago
- 搜索macho中的汇编指令☆36Jan 6, 2023Updated 3 years ago
- Moved: https://codeberg.org/koutheir/selinux☆24Mar 27, 2024Updated 2 years ago
- an attempt to intercept syscalls for iOS applications that is unfinished and works only partially☆16May 3, 2020Updated 6 years ago
- EUI-NEO is a cross-platform, high-performance, low-overhead C++17 UI framework built on OpenGL and GLFW,☆16May 24, 2026Updated 5 months ago
- Control Flow Flattening Deobfuscator for Obfuscator-LLVM as a plugin for IDA Pro.☆91Apr 14, 2025Updated last year
- ☆35Dec 2, 2018Updated 7 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆31Sep 25, 2023Updated 3 years ago
- ☆19Mar 11, 2022Updated 4 years ago
- Remote library injection into Android processes, then hooking via various methods☆71Mar 27, 2026Updated 7 months ago
- Use lief, keystone and capstone to manually inline hook elf(libil2cpp.so)☆34Jul 12, 2024Updated 2 years ago
- iOS 10.1.1 Kernel exploit by Project Zero☆57Dec 16, 2016Updated 9 years ago
- ☆18Sep 11, 2026Updated last month
- Code to extracts stable ARM CPU register values directly from system hardware for fingerprinting device.☆27Jul 23, 2025Updated last year