yasukata / zpoline
system call hook for Linux
☆579Updated 4 months ago
Alternatives and similar repositories for zpoline
Users that are interested in zpoline are comparing it to the libraries listed below
Sorting:
- 📡🐧 Linux kernel syscall implementation tracker☆213Updated last month
- Using ftrace for function hooking in Linux kernel☆269Updated 4 years ago
- Userspace eBPF runtime for Observability, Network & General Extensions Framework☆992Updated last week
- eBPF verifier based on abstract interpretation☆414Updated 2 weeks ago
- Reference setup for Linux kernel development in VSCode☆241Updated 2 months ago
- 🌐🐧 Browsable Linux kernel syscall tables built with Systrack (https://github.com/mebeim/systrack)☆178Updated last month
- Investigate kernel error call stacks☆253Updated 6 months ago
- A powerful static binary rewriting tool☆1,016Updated 3 weeks ago
- Userspace eBPF VM☆886Updated this week
- Linux Kernel hooking engine (x86)☆344Updated 5 months ago
- High-performance QEMU memory and instruction tracing☆543Updated 9 months ago
- A small library to modify all page-table levels of all processes from user space for x86_64 and ARMv8.☆253Updated 2 weeks ago
- A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29☆608Updated 10 months ago
- The system call intercepting library☆644Updated 4 months ago
- Userspace eBPF VM with llvm JIT/AOT compiler☆65Updated last month
- blazesym is a library for address symbolization and related tasks☆174Updated this week
- KVM based tiny x86 hypervisor written in pure golang, which can boot Linux☆231Updated 8 months ago
- Lift machine code to performant LLVM IR☆429Updated 10 months ago
- An eBPF program debugger☆206Updated 2 years ago
- A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)☆1,478Updated last month
- KVM-based Virtual Machine Introspection☆335Updated 6 months ago
- Quickly build and run kernels inside a virtualized snapshot of your live system☆557Updated last week
- revng: the core repository of the rev.ng project☆1,459Updated this week
- Userspace tool to map virtual page addresses to physical addresses.☆184Updated 5 years ago
- ☆445Updated 9 months ago
- CVE-2023-3269: Linux kernel privilege escalation vulnerability☆477Updated last year
- A high performance LLVM-based dynamic binary instrumentation framework☆262Updated 11 months ago
- small elf loader☆143Updated 11 months ago
- Examples for: Learning KVM - implement your own kernel☆373Updated last year
- Kernel Address Space Layout Derandomization (KASLD) - A collection of various techniques to infer the Linux kernel base virtual address a…☆437Updated last year