kxxt/tracexec

A small utility for tracing execve{,at} and pre-exec behavior.

Language: Rust - Size: 25 MB - Last synced: 1 day ago - Pushed: 2 days ago - Stars: 184 - Forks: 3

yrp604/rappel

A linux-based assembly REPL for x86, amd64, armv7, and armv8

Language: C - Size: 105 KB - Last synced: about 8 hours ago - Pushed: 2 months ago - Stars: 1,112 - Forks: 56

yky138495/iOS_Security01

iOS 安全之-反调试

Language: C - Size: 33.2 KB - Last synced: 15 days ago - Pushed: over 4 years ago - Stars: 0 - Forks: 0

z80oolong/proot-z80oolong Fork of termux/proot

proot -- Termux の開発コミュニティによる proot の Debian noroot 環境向け修正版

Language: C - Size: 518 KB - Last synced: 16 days ago - Pushed: over 4 years ago - Stars: 0 - Forks: 0

postmodern/ffi-ptrace

Ruby FFI bindings for ptrace

Language: Ruby - Size: 51.8 KB - Last synced: 16 days ago - Pushed: about 1 year ago - Stars: 9 - Forks: 0

liamg/grace

:screwdriver: It's strace, with colours.

Language: Go - Size: 5.16 MB - Last synced: 16 days ago - Pushed: over 1 year ago - Stars: 249 - Forks: 7

jwueller/fdspy.sh

Capture stdout, stderr, and other file descriptors of running processes on-the-fly, without redirects, screen, or tmux.

Language: Shell - Size: 54.7 KB - Last synced: 17 days ago - Pushed: 17 days ago - Stars: 1 - Forks: 0

fasterthanlime/mevi

A memory visualizer in Rust (ptrace + userfaultfd)

Language: Rust - Size: 702 KB - Last synced: 16 days ago - Pushed: 4 months ago - Stars: 642 - Forks: 13

n1nj4sec/memorpy

Python library using ctypes to search/edit windows / linux / macOS / SunOS programs memory

Language: Python - Size: 73.2 KB - Last synced: 16 days ago - Pushed: over 1 year ago - Stars: 779 - Forks: 138

VIDA-NYU/reprozip

ReproZip is a tool that simplifies the process of creating reproducible experiments from command-line executions, a frequently-used common denominator in computational science.

Language: Python - Size: 19.8 MB - Last synced: 5 days ago - Pushed: 3 months ago - Stars: 297 - Forks: 33

tonysimpson/pointbreak

Process debug and analysis library for Python

Language: Python - Size: 93.8 KB - Last synced: 26 days ago - Pushed: over 5 years ago - Stars: 6 - Forks: 0

micahswitzer/zig-ptrace

Linux ptrace wrappers and utilites for Zig

Language: Zig - Size: 72.3 KB - Last synced: 26 days ago - Pushed: 26 days ago - Stars: 1 - Forks: 0

ohchase/ptrace-do

Featureful library for interacting with unix processes through ptrace, supports x86_64, i686, arm, aarch64 remote function calls

Language: Rust - Size: 32.2 KB - Last synced: 23 days ago - Pushed: 7 months ago - Stars: 31 - Forks: 7

vfsfitvnm/intruducer

A Rust crate to load a shared library into a Linux process without using ptrace.

Language: Rust - Size: 75.2 KB - Last synced: 27 days ago - Pushed: 12 months ago - Stars: 112 - Forks: 13

infiniteregrets/Bunker

A small ptrace based process isolation tool (in progress)

Language: C - Size: 4.88 KB - Last synced: about 1 month ago - Pushed: almost 3 years ago - Stars: 1 - Forks: 1

itdaniher/python-antiforensic-nonsense

Linux internals explorations

Language: Python - Size: 2.93 KB - Last synced: about 1 month ago - Pushed: over 6 years ago - Stars: 2 - Forks: 0

mtoohey31/jama

Package jama facilitates manipulation of syscall return values in Go unit tests, which is probably a bad idea.

Language: Go - Size: 20.5 KB - Last synced: about 1 month ago - Pushed: 7 months ago - Stars: 0 - Forks: 0

termux/proot

An chroot-like implementation using ptrace.

Language: C - Size: 3.23 MB - Last synced: about 1 month ago - Pushed: 6 months ago - Stars: 702 - Forks: 157

ranweiler/pete

A friendly wrapper around ptrace(2)

Language: Rust - Size: 104 KB - Last synced: 12 days ago - Pushed: 8 months ago - Stars: 16 - Forks: 10

uber-archive/pyflame 📦

🔥 Pyflame: A Ptracing Profiler For Python. This project is deprecated and not maintained.

Language: C++ - Size: 368 KB - Last synced: about 1 month ago - Pushed: over 4 years ago - Stars: 2,978 - Forks: 238

DavidBuchanan314/dlinject

Inject a shared library (i.e. arbitrary code) into a live linux process, without ptrace

Language: Python - Size: 45.9 KB - Last synced: about 1 month ago - Pushed: almost 2 years ago - Stars: 756 - Forks: 76

LibertyGlobal/memcr

memory checkpoint and restore

Language: C - Size: 108 KB - Last synced: about 1 month ago - Pushed: 3 months ago - Stars: 6 - Forks: 7

siadat/ptail

view stdout/stderr of any process

Language: Zig - Size: 35.2 KB - Last synced: about 1 month ago - Pushed: about 1 month ago - Stars: 3 - Forks: 0

tobyxdd/linux-anti-debugging

Language: C - Size: 6.84 KB - Last synced: 13 days ago - Pushed: almost 2 years ago - Stars: 36 - Forks: 13

criyle/go-sandbox

Sandbox implemented in GO with container / ptrace / seccomp

Language: Go - Size: 428 KB - Last synced: about 1 month ago - Pushed: about 1 month ago - Stars: 159 - Forks: 26

Hackerl/pangolin

Inject ELF into remote process

Language: C++ - Size: 141 KB - Last synced: 23 days ago - Pushed: 7 months ago - Stars: 90 - Forks: 24

alemidev/pox

an infection framework for processes

Language: Rust - Size: 58.6 KB - Last synced: about 1 month ago - Pushed: 2 months ago - Stars: 1 - Forks: 1

liamg/siphon

:alembic: Intercept stdin/stdout/stderr for any process

Language: Go - Size: 108 KB - Last synced: 16 days ago - Pushed: over 1 year ago - Stars: 187 - Forks: 8

Artemis21/ptrace-inject

Shared library injection for *nix using ptrace, in Rust.

Language: Rust - Size: 22.5 KB - Last synced: 29 days ago - Pushed: about 1 year ago - Stars: 6 - Forks: 0

diazona/pwait

Small utility to wait for a process to finish

Language: C - Size: 52.7 KB - Last synced: about 2 months ago - Pushed: about 2 months ago - Stars: 15 - Forks: 4

proot-me/proot

chroot, mount --bind, and binfmt_misc without privilege/setup for Linux

Language: C - Size: 3.71 MB - Last synced: about 2 months ago - Pushed: 3 months ago - Stars: 1,822 - Forks: 340

proot-me/proot-rs

Rust implementation of PRoot, a ptrace-based sandbox

Language: Rust - Size: 500 KB - Last synced: about 2 months ago - Pushed: over 1 year ago - Stars: 118 - Forks: 20

itchyny/procout

procout peeks write(2) of another process using ptrace(2), written in Rust

Language: Rust - Size: 4.88 KB - Last synced: 16 days ago - Pushed: over 6 years ago - Stars: 28 - Forks: 0

dettrace/dettrace

A determinizing tracer using Ptrace

Language: C++ - Size: 41.6 MB - Last synced: about 1 month ago - Pushed: over 3 years ago - Stars: 31 - Forks: 8

vanerac/strace

Worked with a friend to recreate strace with a coupe of flags

Language: C - Size: 44.9 KB - Last synced: about 2 months ago - Pushed: over 2 years ago - Stars: 0 - Forks: 0

dhruvdcoder/Intelibugger

A debugging automation framework for C++ on Linux, inspired from LLVM.

Language: C++ - Size: 719 KB - Last synced: about 2 months ago - Pushed: about 6 years ago - Stars: 0 - Forks: 1

Arinerron/heaptrace

helps visualize heap operations for pwn and debugging

Language: C - Size: 1.34 MB - Last synced: 2 months ago - Pushed: over 1 year ago - Stars: 289 - Forks: 19

brainsmoke/ptrace-burrito

a friendly wrapper around ptrace

Language: C - Size: 155 KB - Last synced: about 2 months ago - Pushed: about 2 years ago - Stars: 123 - Forks: 7

rootless-containers/runrootless 📦

rootless OCI container runtime with ptrace hacks (No root privileges nor SUID binaries (e.g. newuidmap) are required!)

Language: Go - Size: 3.94 MB - Last synced: 17 days ago - Pushed: about 6 years ago - Stars: 119 - Forks: 11

AkihiroSuda/lsf

Linux Subsystem for FreeBSD (😈 on 🐧)

Language: Go - Size: 64.5 KB - Last synced: 28 days ago - Pushed: over 1 year ago - Stars: 160 - Forks: 3

mukovnin/psfiles

A CLI tool to monitor file system activity of a Linux process

Language: C++ - Size: 464 KB - Last synced: 2 months ago - Pushed: 2 months ago - Stars: 38 - Forks: 0

mkozlowski/memcr Fork of LibertyGlobal/memcr

memory checkpoint and restore

Language: C - Size: 108 KB - Last synced: 3 months ago - Pushed: 3 months ago - Stars: 3 - Forks: 0

MJx0/AndKittyInjector

Inject a shared library into a process using ptrace

Language: C++ - Size: 656 KB - Last synced: 3 months ago - Pushed: 6 months ago - Stars: 107 - Forks: 41

felipensp/vtracer

Ptrace interface for writing tracing tools in V and tracing tool

Language: V - Size: 10.7 KB - Last synced: 3 months ago - Pushed: 3 months ago - Stars: 1 - Forks: 0

orivej/fptrace

Record process launches and files read and written by each process

Language: Go - Size: 65.4 KB - Last synced: about 2 months ago - Pushed: 9 months ago - Stars: 56 - Forks: 8

javierhonduco/write-a-strace-and-gdb

Tiny system call tracer and debugger

Language: C - Size: 22.5 KB - Last synced: 24 days ago - Pushed: almost 6 years ago - Stars: 110 - Forks: 18

pinterest/ptracer

A library for ptrace-based tracing of Python programs

Language: Python - Size: 72.3 KB - Last synced: 9 days ago - Pushed: about 1 year ago - Stars: 154 - Forks: 27

sydbox/sydbox-1 📦

seccomp-bpf & seccomp-notify based sandbox for modern Linux machines to sandbox unwanted process access to filesystem and network resources. This is a FREQUENTLY UPDATED MIRROR. You are welcome to use issues and pull requests here if you feel like it. Main git repo is on git.exherbo.org, development happens on sr.ht where bug tracker and mailing lists are present. Thank you.

Language: C - Size: 6.25 MB - Last synced: 12 days ago - Pushed: almost 2 years ago - Stars: 15 - Forks: 2

kfiros/ssh-alert

Detect SSH connection attempts in real time using ptrace

Language: C - Size: 8.79 KB - Last synced: 4 months ago - Pushed: over 8 years ago - Stars: 8 - Forks: 3

krytarowski/picotrace

picotrace - system call process tracer

Language: C - Size: 1.93 MB - Last synced: about 2 months ago - Pushed: about 4 years ago - Stars: 33 - Forks: 4

meefik/PRoot Fork of proot-me/proot

chroot, mount --bind, and binfmt_misc without privilege/setup for Linux

Language: C - Size: 3.63 MB - Last synced: about 1 month ago - Pushed: almost 5 years ago - Stars: 43 - Forks: 9

craigmulligan/sandy 📦

A tiny "sandbox" to run untrusted code 🏖️

Language: Go - Size: 6.01 MB - Last synced: about 1 month ago - Pushed: over 4 years ago - Stars: 338 - Forks: 8

DavidBuchanan314/TARDIS

Trace And Rewrite Delays In Syscalls: Hooking time-related Linux syscalls to warp a process's perspective of time, using ptrace.

Language: C - Size: 13.7 KB - Last synced: 2 months ago - Pushed: almost 3 years ago - Stars: 155 - Forks: 15

p3nj/KerlockHomes

Kerlock Homes: A modular program that secures the kernel, defends user-space, and fortifies home directories against eBPF-based threats.

Language: C - Size: 619 KB - Last synced: 7 months ago - Pushed: 7 months ago - Stars: 0 - Forks: 1

rustymagnet3000/ios_debugger_challenge

A playground for run-time iOS app inspection

Language: Swift - Size: 2.43 MB - Last synced: 6 months ago - Pushed: over 1 year ago - Stars: 141 - Forks: 28

therealdreg/drx_ptrace_shellcode_injector

drx ptrace shellcode injector

Language: C - Size: 66.4 KB - Last synced: 16 days ago - Pushed: 9 months ago - Stars: 6 - Forks: 5

Thiefyface/Atrophy

x86/64 Linux Debugger (written w/ python stdlib,ctypes/ptrace)

Language: Python - Size: 6.59 MB - Last synced: 7 months ago - Pushed: about 7 years ago - Stars: 9 - Forks: 1

k-stz/cl-ptrace

live process hacking - lisp bindings to ptrace()

Language: Common Lisp - Size: 3.54 MB - Last synced: about 1 month ago - Pushed: about 2 years ago - Stars: 51 - Forks: 1

hc0d3r/mysql-magic

dump mysql client password from memory

Language: C - Size: 361 KB - Last synced: 6 months ago - Pushed: about 4 years ago - Stars: 233 - Forks: 58

nopn0p/rkorova

ld_preload userland rootkit

Language: C - Size: 223 KB - Last synced: 7 months ago - Pushed: over 3 years ago - Stars: 32 - Forks: 9

hc0d3r/sudohulk

try privilege escalation changing sudo command

Language: C - Size: 9.77 KB - Last synced: 6 months ago - Pushed: about 6 years ago - Stars: 116 - Forks: 28

hitzhangjie/golang-debugger-book

From a debugger's view, Let's explore the computer world! How does compiler, linker and debugger coordinate with each other around the program written in specific programming language? How does a debugger work? If we develop a debugger for go programming language, we must master go type system, runtime... and some Operating System internals. OK, all the contents mentioned above will be covered in this book. Hope you enjoy it!

Language: Makefile - Size: 24.3 MB - Last synced: 7 months ago - Pushed: 9 months ago - Stars: 100 - Forks: 6

felipensp/itrace

Tracks runtime instruction execution in Linux programs

Language: C - Size: 313 KB - Last synced: 7 months ago - Pushed: over 10 years ago - Stars: 29 - Forks: 2

proot-me/proot-me.github.io

chroot, mount --bind, and binfmt_misc without privilege/setup for Linux

Language: HTML - Size: 63.5 KB - Last synced: about 2 months ago - Pushed: over 2 years ago - Stars: 9 - Forks: 7

omr00t/ptrace_killer

A Linux LKM (Loadable Kernel Module) that detects any process that's utilizing ptrace and its tracees, and then it kills them.

Language: C - Size: 688 KB - Last synced: 8 months ago - Pushed: almost 3 years ago - Stars: 1 - Forks: 1

mwarzynski/uw_alienos

Alien's operating system syscalls emulator.

Language: C - Size: 102 KB - Last synced: 9 months ago - Pushed: about 6 years ago - Stars: 1 - Forks: 0

cyberfined/ptraxor

Language: C - Size: 1.95 KB - Last synced: 9 months ago - Pushed: almost 5 years ago - Stars: 0 - Forks: 0

prateekroy/Tracer

Naive debugger to trace executables

Language: C++ - Size: 8.79 KB - Last synced: 9 months ago - Pushed: over 5 years ago - Stars: 0 - Forks: 0

i-ky/basset

A tool that generates a compilation database for clang tooling using ptrace.

Language: C++ - Size: 25.4 KB - Last synced: 7 months ago - Pushed: 7 months ago - Stars: 2 - Forks: 0

K-atc/stdin-logger

`stdin-logger` is a wrapper command to log stdin. This app is useful for CTF scene.

Language: C++ - Size: 6.84 KB - Last synced: 9 months ago - Pushed: almost 6 years ago - Stars: 3 - Forks: 1

nordlow/memoizer

Process call memoizer

Language: C++ - Size: 424 KB - Last synced: 10 months ago - Pushed: about 7 years ago - Stars: 2 - Forks: 0

resilar/ramfuck

Linux memory editor

Language: C - Size: 174 KB - Last synced: 10 months ago - Pushed: over 3 years ago - Stars: 5 - Forks: 2

resilar/psyscall

Linux syscall() injection

Language: C - Size: 31.3 KB - Last synced: 10 months ago - Pushed: over 3 years ago - Stars: 29 - Forks: 4

rafael-santiago/aegis

Linux, FreeBSD, NetBSD, OpenBSD and Windows debugging detection library. With support for C and Go.

Language: Go - Size: 418 KB - Last synced: 9 months ago - Pushed: over 2 years ago - Stars: 30 - Forks: 4

rxOred/zkz

A pathetic x64 Linux debugger

Language: C++ - Size: 585 KB - Last synced: about 1 month ago - Pushed: over 2 years ago - Stars: 3 - Forks: 0

jay16213/sdb

simple C debugger like gdb

Language: C - Size: 6.3 MB - Last synced: 9 months ago - Pushed: 9 months ago - Stars: 0 - Forks: 0

hc0d3r/chroot-escape

try escape from chroot with non root user

Language: C - Size: 10.7 KB - Last synced: 9 months ago - Pushed: over 5 years ago - Stars: 13 - Forks: 4

myl7/nrm 📦

Use ptrace to trap unlink* syscall and do path validation to protect your files from sad unexpected unrecoverable deletion

Language: Rust - Size: 31.3 KB - Last synced: 8 days ago - Pushed: about 1 year ago - Stars: 0 - Forks: 0

souk4711/gsandbox

A sandbox for Linux/amd64 which can be used to run untrusted programs.

Language: Go - Size: 127 KB - Last synced: 10 months ago - Pushed: over 1 year ago - Stars: 0 - Forks: 0

peixinchen/bdb

一个演示版本的 mini 调试器

Language: C++ - Size: 2.49 MB - Last synced: 10 months ago - Pushed: over 5 years ago - Stars: 23 - Forks: 4

mdcssw/process_vm_io

I/O access to virtual memory contents of processes

Language: Rust - Size: 64.5 KB - Last synced: 4 months ago - Pushed: 4 months ago - Stars: 5 - Forks: 2

maronuu/SimpleDebugger

A simple debugger implemented in C using ptrace

Language: C - Size: 10.7 KB - Last synced: 11 months ago - Pushed: 11 months ago - Stars: 0 - Forks: 0

detailyang/closewait

closewait closes closed-wait sockets via procfs and ptrace

Language: Rust - Size: 23.4 KB - Last synced: 12 months ago - Pushed: almost 4 years ago - Stars: 1 - Forks: 1

diggerwoo/jsh

JSH is an easy-to-use jailed shell tool that supports home jail for SSH / SFTP and does not require complicated docker or chroot configurations.

Language: C - Size: 234 KB - Last synced: 3 months ago - Pushed: 3 months ago - Stars: 2 - Forks: 0

sschroe/sigtrace

Trace the source of signals on Linux

Language: C - Size: 4.88 KB - Last synced: 7 months ago - Pushed: about 7 years ago - Stars: 6 - Forks: 0

namecoin/heteronculous-horklump

Go port of Heteronculous (ptrace-based proxy leak detector). Outreachy project.

Language: Go - Size: 1.06 MB - Last synced: 7 months ago - Pushed: 7 months ago - Stars: 4 - Forks: 3

0xN3utr0n/Yaef

Yet Another ELF-Injector

Language: C - Size: 68.4 KB - Last synced: about 1 year ago - Pushed: over 4 years ago - Stars: 10 - Forks: 3

atheriel/xrprof

An external sampling profiler for R programs

Language: C - Size: 153 KB - Last synced: 12 months ago - Pushed: over 2 years ago - Stars: 76 - Forks: 4

goduphi/polybugger

A custom debugger for C and C++ programs based on GDB.

Language: C - Size: 27.3 KB - Last synced: about 1 year ago - Pushed: almost 3 years ago - Stars: 2 - Forks: 0

syang-ng/Android-Inject

An inject demo of android by c.

Language: C - Size: 138 KB - Last synced: about 1 year ago - Pushed: almost 7 years ago - Stars: 5 - Forks: 1

thegreyd/PtraceMonitor

A simple sandbox using the ptrace system call.

Language: C - Size: 29.3 KB - Last synced: about 1 year ago - Pushed: about 7 years ago - Stars: 1 - Forks: 0

briceburg/fdclose

attach to a process and close a file descriptor

Language: C - Size: 22.5 KB - Last synced: about 1 year ago - Pushed: about 7 years ago - Stars: 18 - Forks: 4

lennihein/PG 📦

PG ITSi: ProcessInjection

Language: C - Size: 10.1 MB - Last synced: about 1 year ago - Pushed: about 5 years ago - Stars: 1 - Forks: 0

reverie-rs/reverie 📦

trace and intercept linux syscalls.

Language: Rust - Size: 1.94 MB - Last synced: about 1 year ago - Pushed: over 2 years ago - Stars: 14 - Forks: 5

mayant15/glass 📦

A simple debugger

Language: C++ - Size: 10.7 KB - Last synced: about 1 year ago - Pushed: over 2 years ago - Stars: 0 - Forks: 0

idbella/strace

Strace is a debugging tool under Linux to monitor system calls used by a program, and all the signals it receives.

Language: C - Size: 55.7 KB - Last synced: about 1 year ago - Pushed: almost 4 years ago - Stars: 0 - Forks: 0

darx0r/poke

ptrace poke command-line tool

Language: C - Size: 18.6 KB - Last synced: about 1 year ago - Pushed: over 4 years ago - Stars: 13 - Forks: 6

alexander-pick/apinject

APInject is a Linux process injector which is designed to inject itself into the target process, instead of using an external library.

Language: C - Size: 36.1 KB - Last synced: about 1 year ago - Pushed: over 1 year ago - Stars: 3 - Forks: 1

rofl0r/debuglib

wrapper library for the functionality offered by ptrace. features facilities to enter breakpoint, debug and hook syscalls, etc.

Language: C - Size: 98.6 KB - Last synced: about 1 year ago - Pushed: about 2 years ago - Stars: 18 - Forks: 6

dalance/proc-reader

A std::io::Read implementation for stdout/stderr of other process

Language: Rust - Size: 47.9 KB - Last synced: 12 days ago - Pushed: 9 months ago - Stars: 5 - Forks: 1