Search Results for "hooking"

ByteHook is a ByteDance-hosted project whose name suggests a hooking or instrumentation library, likely used for hooking system calls or API calls for monitoring, sandboxing or instrumentation. The repository appears to aim at low-level hooking/injection capabilities, perhaps to support runtime introspection, behavioral monitoring, or hooking-based instrumentation (e.g. for security, tracing, sandboxing, or debugging).

shadowhook is an open-source native code hooking library for Android — designed to let developers intercept and override native (C/C++) functions inside Android apps at runtime. It supports both ARM32 and ARM64 architectures (and the respective “thumb” instruction set) and works across a wide range of Android OS versions. The library allows you to specify hook targets either by function address or by library name + function name, and it automatically handles newly loaded shared libraries (ELFs), ensuring hooks remain effective even when code is dynamically loaded at runtime. ...

...From hardcore low-level assembler to high-level applications. There is also large subproject is the ISO Loader, which contains emulation of BIOS system calls, CDDA playback, and VMU, also it can hooking interrupts for various SDKs and more.

BlockHook is an Objective-C library that enables hooking into the execution of blocks (closures). It allows developers to intercept, modify, and monitor block invocations for debugging, analytics, or altering app behavior.

Spock SLAF is a Shared Library Application Firewall "SLAF". It has the purpose to protect any service that uses the OpenSSL library. The SLAF inserts hooking to intercept all communication to detect security anomalies and block and log attacks.

...By using Donut along with the process injection capabilities of SHAD0W, it provides the operator the ability to execute .NET assemblies, DLLs, EXEs, JS, VBS or XSLs fully inside the memory. Dynamically resolved syscalls are heavily used to avoid userland API hooking, anti-DLL injection to make it harder for EDR to load code into the beacons, and official Microsoft mitigation methods to protect spawn processes. Runs fully inside of Docker allowing cross-platform usage. SHAD0W is a modular C2 framework designed to successfully operate on mature environments. All traffic between beacons and the C2 are encrypted and transmitted over HTTPS.

The ugtrain is the universal elite game trainer for the command line on Linux under GPLv3. Its dynamic memory support sets it apart. A preloader, a memory discovery and a memory hacking library are included for this. Other features: config file per game, included FOSS game example configs, simplified discovery, security bypassing, automatic adaptation to compiling differences. This project is mostly handled on GitHub: https://github.com/ugtrain/ugtrain

The goal of qHttpd project is building a highly customizable HTTP server which can be used in many projects not only for a HTTP delivery layer but also for a versatile communication protocol. By default, it supports WebDAV and LUA script hooking.

dxcut is a library for reading, editing, and writing dex and odex files which contain the class definition and Dalvik bytecode used by the Android operating system. This project includes a disassembler/decompiler, dex optimizer, and hooking utils.

Tunnel all your your shell commands/tools through HTTP, Socks4 or Socks5 proxies. Different proxy types can be mixed in the same chain and supports authentication for HTTP and Socks5. It works by hooking all the calls to connect().

Advance lightweight module messaging system - allowing unlimited modules of different languages to interact with each other by hooking and sending events.

The goal of the Stik's Security Module project is to provide a vehicle for implementation of a label based security policy complimentary to the existing Linux security model. The module is implemented by hooking the Linux 2.4.x system call table.