stdhu / kernel-inline-hookLinks
linux kernel inline hook
☆133Updated 2 years ago
Alternatives and similar repositories for kernel-inline-hook
Users that are interested in kernel-inline-hook are comparing it to the libraries listed below
Sorting:
- ☆58Updated 3 years ago
- 自實現Linker的小Demo☆70Updated 2 months ago
- LLVM PASS by SsageParuders.Port to llvm_14.06 with New PM.Support for Android-ndk-r25(LTS).☆168Updated 2 years ago
- Mirror of https://gitee.com/SmartSmallBoy/hardware-breakpoint☆52Updated last year
- ☆17Updated last year
- 本工具用于解决ollvm编译出来的Linux驱动文件,加载进内核会报错“please compile with -fno-common”的问题☆37Updated 4 years ago
- A kernel module to read and write memory in a remote process.☆63Updated 11 months ago
- ☆71Updated 2 years ago
- AntiOllvm Fla with Fake Runtime☆170Updated 6 months ago
- hook or replace arbitary linux kernel functions in runtime, supporting arm32, arm64, x86, x86_64☆199Updated last month
- 内核硬件调试器模块,rootkit操作 dump☆35Updated 3 years ago
- System Call Hook for ARM64☆165Updated last month
- A rootkit for Android.☆54Updated last year
- silent syscall hooking without modifying sys_call_table/handlers via patching exception handler☆134Updated last year
- IDA Python Script for anti ollvm☆106Updated 3 years ago
- tprt ollvm 反混淆 修改 binja il☆44Updated 11 months ago
- ☆121Updated 3 years ago
- ollvm, base on llvm-clang 18.x☆80Updated last year
- Utils use to dump android ELF from memory and do some fix including the ELF section header rebuilding☆70Updated 2 years ago
- 2023 年 羊城杯 ezAndroid dex VMP 恢复工具☆36Updated last year
- Linux内核级无痕进程注入驱动,无视内存区域扫描检测,提供内核级进程注入方案。☆74Updated last year
- 去除BR混淆 Deobfuscation BR☆77Updated last year
- A cli tool to install a hardware breakpoint/watchpoint on a process in linux.☆226Updated last year
- A Simple uprobe Hook Framework☆53Updated 4 months ago
- 利用ptrace,通过ptrace修改PC寄存器调用dlopen/dlsym或者在shellcode中调用dlopen/dlsym☆29Updated 6 years ago
- this is Android Custom Linker by Android12 LinkerSourcesCode☆44Updated last year
- 一个基于uprobe,能同时hook大量用户地址空间函数的kpm内核模块☆150Updated 2 weeks ago
- deflat plugins for ida pro☆42Updated last year
- A Kernel module to break the kernel read-only to modify the syscall_table purpose (only in the Linux Arm64 6.6 Kernel test runs properly)…☆28Updated 6 months ago
- ☆35Updated 7 months ago