Awesome GitHub RepositoriesRuntime Execution Interception

jvm-sandbox is a bytecode instrumentation framework and plugin container for the Java Virtual Machine. It acts as a runtime application modifier that enables the injection and modification of bytecode in a running process without requiring an application restart or changes to the original source code. The system provides a non-invasive aspect-oriented programming framework to intercept method execution and alter behavior in live processes. It functions as an isolated environment for functional modules, employing a custom class loader hierarchy to prevent dependency conflicts between plugins a

BlocksKit is a low-level utility library for Apple platform development, specifically designed for managing the execution flow and memory of blocks within macOS and iOS applications. It provides a collection of helper functions to simplify the use of blocks in Objective-C and C, reducing boilerplate code and addressing inherent technical limitations. The library focuses on bridging Objective-C blocks with legacy C-based APIs by providing compatible wrapper structures and function-pointer emulation. It enables the passing of blocks through system interfaces that require strict C-style callback

Harmony is a library for modifying, replacing, and decorating compiled .NET and Mono methods during execution without altering binary files on disk. It functions as a runtime method patching tool, a CIL instruction manipulator, and a reflection extension for C#. The project provides mechanisms to intercept method execution, allowing custom code to run before or after original methods while maintaining the existing program flow. It enables the analysis and rewriting of Common Intermediate Language instructions to change the internal logic of compiled methods. The toolkit also includes utiliti

Epic ist ein Toolkit für Android-Runtime-Instrumentierung, Methoden-Interzeption und Sicherheits-Auditing. Es fungiert als aspektorientiertes Programmier-Framework und dynamischer Methoden-Interzeptor, der darauf ausgelegt ist, das Verhalten von Java-Methoden innerhalb der Android Runtime zu überwachen und zu ändern. Das Projekt bietet Funktionen zum Abfangen und Modifizieren sowohl von Kernkomponenten des Android-Frameworks als auch spezifischer Anwendungslogik. Dies ermöglicht die Injektion von benutzerdefiniertem Java-Verhalten und die Umleitung der Methodenausführung, ohne den ursprünglichen Quellcode zu ändern. Das Framework enthält Tools für das Sicherheits-Auditing von Anwendungen, die das Scannen nach eingebetteten Shells und die Überwachung der Nutzung sensibler System-APIs umfassen. Diese Observability-Funktionen ermöglichen die Analyse des Datenflusses und die Verifizierung von Sicherheitsstatus während der Laufzeitausführung.

HyperDbg is a hardware-assisted kernel-mode debugging platform that leverages virtualization to monitor and control system execution. By utilizing hypervisor-level primitives, it enables deep system analysis and instrumentation without relying on standard operating system debugging interfaces. The framework provides a comprehensive environment for inspecting both kernel and user-mode processes, allowing for granular control over execution flow and system state. The project distinguishes itself through a transparent debugging layer designed to remain invisible to the target environment. It emp