PerformanC/ReZygisk
ReZygisk
ReZygisk is an Android root module framework and Zygote process injector. It functions as a native hooking engine and linker redirection tool designed to inject custom code into the Android Zygote process so that modifications are inherited by all spawned applications.
The project provides a decoupled abstraction layer and Zygisk API implementation, allowing system modules to operate independently of specific root management tools. This ensures that root modules remain stable and compatible across various kernel-level rooting solutions.
The framework includes capabilities for system process hiding and memory-level process hiding to bypass linker detection and security scanners. It utilizes dynamic symbol resolution and instruction-pointer native hooking to modify function behavior in memory.
Features
- Zygote Injection Frameworks - Functions as a Zygote injection framework to ensure modifications are inherited by all spawned Android applications.
- Android Rooting Frameworks - Provides a decoupled framework for creating Android root modules that work independently of specific root managers.
- Rooted Runtime Development - Enables the development of root-level system modifications through a standardized Zygisk interface.
- Zygote Code Injectors - Injects custom machine code into the Android Zygote process to ensure modifications are inherited by all spawned apps.
- Linker Redirection - Implements a linker redirection mechanism to hide modified libraries and memory segments from security scanners.
- Linker Redirection Tools - Intercepts system calls to hide modified libraries and memory segments from security detection tools.
- Instruction Hooking - Uses instruction-level hooking to redirect execution flow by overwriting function entry points in memory.
- Process Injection Frameworks - Provides a process injection framework to inject custom code into the Android Zygote process.
- Process Memory Hiding - Bypasses security checks and linker detection to keep modified processes hidden from integrity scanners.
- Runtime Symbol Resolution - Provides runtime symbol resolution to maintain compatibility across different Android versions.
- Android Root Management - Maintains stability and compatibility for system-level modifications across diverse Android root management environments.
- System Process Hiding - Bypasses linker detection and security checks to hide modified processes from integrity scanners.
- Native Hooking Engines - Ships a native hooking engine to modify function behavior in memory by redirecting execution flow.
- Root-Level System Integration - Ensures system-level integration and plugin compatibility across various kernel-level rooting solutions.
- Zygisk Mounting - Implements Zygisk-based runtime mounting techniques to intercept processes and bypass detection.
- Interface-Based Module Registries - Provides an interface-based module registry to decouple root module logic from specific root management tools.
- Root Module Interfaces - Implements a standardized Zygisk API to ensure external plugins work consistently across different root environments.
