Stealthy Linux Kernel Rootkit for modern kernels (6x)

Advanced Game Hacking Library for C, Modern C++, Rust and Python (Windows/Linux/FreeBSD) (Process/Memory Hacking) (Hooking/Detouring) (Cross Platform) (x86/x64) (DLL/SO Injection) (Internal/External) (Assembler/Disassembler)

Mirror of https://gitlab.redox-os.org/redox-os/kernel

Inline syscalls made easy for windows on clang

system call hook for Linux

A wrapper library around native windows sytem APIs

Userspace macOS translation layer for Linux ARM64

linux elf injector for x86 x86_64 arm arm64

📡🐧 Linux kernel syscall implementation tracker

A modern, mostly zero-allocation C++23 library for working with low-level Windows within user-space. Iteration over loaded modules via PEB, EAT iteration, lazy imports, syscalls, and more.

** DISCONTINUED ** C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + Dinvoke for EDR user-mode hooking evasion.

A modern syscall tracer built on eBPF. Think strace, but with a real TUI, smart filters, TLS decryption, and output that's actually readable.

A library for loading ELF from memory and/or making Linux syscalls on Android written in pure Java.

Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2

An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both syscalls and dynamic resolve versions are available.

Liburing is Python + Zig wrapper around C Liburing, which is a helper to setup and tear-down io_uring instances.

Work in progress firewall for Linux syscalls, written in Rust

Generate a variety of suspect actions that are detected by Falco rulesets

A simple x86_64 AMD-v hypervisor type-2 Programmed with C++, with soon to be added syscall hooks. [W.I.P]

Traces syscalls on iOS via Frida, including Mach syscalls.