malefax/Adrishya

Author of Project Adrishya a rootkit which use ftrace mechanism to hook syscall; (write this because God commanded me); work for both x86_64 and arm; CREDIT-(Oleksii Lozovskyi{ilammy})FOUNDER OF FTRACE HOOKING

Language: C - Size: 493 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 14 - Forks: 1

lazypoline/lazypoline

The lazypoline syscall interposer

Language: C++ - Size: 59.6 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 24 - Forks: 3

yasukata/zpoline

system call hook for Linux

Language: C - Size: 230 KB - Last synced at: 2 months ago - Pushed at: 5 months ago - Stars: 550 - Forks: 40

oditynet/syscall-hook

Danger! It is crash your system

Language: C - Size: 14.6 KB - Last synced at: 2 months ago - Pushed at: 7 months ago - Stars: 0 - Forks: 0

x42en/sysplant

Your syscall factory

Language: Nim - Size: 2.54 MB - Last synced at: 24 days ago - Pushed at: 3 months ago - Stars: 121 - Forks: 12

alphaSeclab/hooking

Resources About Hooking. For All Platforms. Currently 300+ Tools And 600+ Posts.

Size: 109 KB - Last synced at: 4 months ago - Pushed at: about 5 years ago - Stars: 321 - Forks: 75

SilverPlate3/GoodKit

Rootkit for the blue team. Sophisticated and optimized LKM to detect and prevent malicious activity

Language: C++ - Size: 271 KB - Last synced at: 2 months ago - Pushed at: about 1 year ago - Stars: 35 - Forks: 3

nbs32k/inline-syscall

Inline syscalls made for MSVC supporting x64 and WOW64

Language: C++ - Size: 40 KB - Last synced at: about 1 year ago - Pushed at: almost 2 years ago - Stars: 168 - Forks: 30

kn0wl3dge/AutoDetours 📦

This project is no longer maintained. You should check out SledRE (https://github.com/sledre/sledre) which is the continuation of it.

Language: C++ - Size: 21.2 MB - Last synced at: about 1 year ago - Pushed at: over 3 years ago - Stars: 7 - Forks: 2

arm1nt/lkm-rootkit

WIP -- LKM rootkit

Language: C - Size: 8.79 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 0 - Forks: 0

sledre/sledre 📦

SledRE is an application allowing to trace syscalls from a lot of Windows PE at the same time.

Language: Python - Size: 15.8 MB - Last synced at: almost 2 years ago - Pushed at: over 3 years ago - Stars: 5 - Forks: 1

sledre/agent 📦

Agent installed in Windows VM and provided sample analysis to SledRE.

Language: C++ - Size: 11.2 MB - Last synced at: almost 2 years ago - Pushed at: over 3 years ago - Stars: 1 - Forks: 0

Major2000/syscallhook

Enumerate which window API calls are hooked by an EDR using inline patching technique

Language: C++ - Size: 108 KB - Last synced at: about 2 years ago - Pushed at: over 2 years ago - Stars: 2 - Forks: 0

Cycatz/fsh

fsh, a library provides a convenient and simple way to hook system calls using ftrace

Language: C - Size: 147 KB - Last synced at: about 2 years ago - Pushed at: about 2 years ago - Stars: 0 - Forks: 0

2ck/syscall-hook

Language: C - Size: 24.4 KB - Last synced at: over 2 years ago - Pushed at: over 3 years ago - Stars: 0 - Forks: 0