xhz444 / -Native-test-Links
记录牛头检测的一些办法
☆44Updated 9 months ago
Alternatives and similar repositories for -Native-test-
Users that are interested in -Native-test- are comparing it to the libraries listed below
Sorting:
- 一个用于隐藏apatch root挂载文件特征的内核模块☆94Updated 8 months ago
- ☆82Updated last week
- A zygisk module that hooks `libdexfile.so` to dump dex☆129Updated 11 months ago
- apatch内核模块用于隐藏mountxxx & maps & smaps的指定内容☆61Updated 8 months ago
- 适用于 Android 的patch内核 root 解决方案☆51Updated 10 months ago
- ☆106Updated last year
- A apatch kernel module that helps you hide device environment :)☆71Updated 2 months ago
- https://github.com/Yervant7/ZygiskNext☆66Updated last year
- ☆63Updated 2 months ago
- 计算内存中的libc.so,libart.so的crc与文件中的对比检测apk是否处于异常环境。☆77Updated 2 years ago
- 一个用于抹去ptrace注入部分文件特征的apatch内核模块☆52Updated last month
- A demo app to detect Zygote injections☆97Updated 2 months ago
- Android aarch64 kernel rootkit(driver module)☆105Updated last month
- A Xposed-like library for runtime Java method interception in OpenJDK VM.☆76Updated 2 months ago
- 本工具用于在无Linux内核源码的情况下,查找出内核函数load_module的位置,确保在无内核源码的情况下,顺利去除所有加载驱动的验证,此工具适用于所有Linux ARM64 内核☆126Updated 3 months ago
- 一个致力于快速帮助用户配置Root环境隐藏的安装器模块的Git存储库 | A Git repository dedicated to quickly helping users configure a hidden installer module for a Root e…☆73Updated 7 months ago
- Build KernelPatch's KPM module in anywhere☆66Updated last month
- 检测app是否被frida/xposed注入☆60Updated 8 months ago
- You are right if you want to look for a detection application...☆43Updated last year
- FunELF(基于Xposed实现的SO脱壳机,用于还原内存中释放的SO文件。)☆59Updated 2 years ago
- apatch内核模块 用于文件重定向☆71Updated 8 months ago
- apatch kpm 模块通用内核读写内存 linux kernel read only support ARM64(based apatch)☆31Updated last year
- 一个帮助用户解包android的apex文件并重新打包成apex的工具☆31Updated last year
- Frida-Sigaction-Seccomp实现对Android APP系统调用的拦截☆123Updated last year
- MagiskHide in Zygisk☆86Updated 3 years ago
- 内核驱动开发工具包 (Kernel Driver Development Kit)☆69Updated 2 weeks ago
- A POC to detect zygisk☆69Updated 5 months ago
- apatch kpm 模块通用内核读写内存 linux kernel read only support ARM64(based apatch)☆45Updated 6 months ago
- Fork LSPlant for remove deps by private repository☆26Updated last year
- frida-gadget injection tool based on xposed☆45Updated 2 years ago