btrace:binder_transaction+eBPF+Golang实现通用的Android APP动态行为追踪工具
☆197Jun 15, 2024Updated last year
Alternatives and similar repositories for btrace
Users that are interested in btrace are comparing it to the libraries listed below
Sorting:
- Android system call hook☆228Jan 22, 2025Updated last year
- Single-step debugging of native code using frida, stalker, and semaphore☆87Oct 9, 2024Updated last year
- 劫持Zygote在App启动前注入so☆347Jan 22, 2026Updated last month
- A library for hiding and retrieving imports in ELF binaries.☆192Apr 18, 2025Updated 10 months ago
- ☆175Jun 27, 2025Updated 8 months ago
- eBPF-Based DexDumper for Android☆367Dec 8, 2025Updated 2 months ago
- A binder interceptor framework for Android☆366Jun 24, 2024Updated last year
- 研究内核改机策略☆69Mar 13, 2024Updated last year
- frida runtime resolves smali☆92Jan 24, 2026Updated last month
- eBPF-based lightweight debugger for Android☆755Dec 27, 2025Updated 2 months ago
- AntiOllvm Fla with Fake Runtime☆182Jan 8, 2025Updated last year
- Frida-Sigaction-Seccomp实现对Android APP系统调用的拦截☆127Jan 26, 2024Updated 2 years ago
- monitor svc calls of android☆74Sep 6, 2018Updated 7 years ago
- ☆122Mar 18, 2022Updated 3 years ago
- A tool that traces system calls using eBPF☆268Oct 31, 2024Updated last year
- Code injection on Android without ptrace☆280Mar 20, 2024Updated last year
- 去除BR混淆 Deobfuscation BR☆91Jun 20, 2024Updated last year
- ☆387Mar 29, 2025Updated 10 months ago
- 基于eBPF的堆栈追踪工具☆1,353Jan 11, 2026Updated last month
- Android assembly instruction tracing tool☆142Apr 17, 2025Updated 10 months ago
- ☆147Sep 9, 2025Updated 5 months ago
- 一个Android通用svc跟踪以及hook方案——Frida-Seccomp☆648May 14, 2024Updated last year
- This is a dynamic instrumentation tool that can inject xposed module into any appliation on rooted Android devices.☆159Feb 4, 2026Updated 3 weeks ago
- Xposed免root注入so方案, 支持android各个版本☆242May 1, 2024Updated last year
- 用于练手的环境检测的demo☆92Jan 3, 2024Updated 2 years ago
- ☆417Mar 17, 2023Updated 2 years ago
- A cli tool to install a hardware breakpoint/watchpoint on a process in linux.☆246Jul 6, 2024Updated last year
- apatch kpm 模块通用内核读写内存 linux kernel read only support ARM64(based apatch)☆64Jan 13, 2026Updated last month
- a few android analysis tools, jni trace by native hook, Java Object Format to Json for Xposed and Frida