# Dynamic Instrumentation Hooking Frameworks

> Search results for `dynamic instrumentation framework for hooking app internals` on awesome-repositories.com. 118 total matches; showing the first 50.

Explore on the web: https://awesome-repositories.com/q/dynamic-instrumentation-framework-for-hooking-app-internals

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [this search on awesome-repositories.com](https://awesome-repositories.com/q/dynamic-instrumentation-framework-for-hooking-app-internals).**

## Results

- [mobsf/mobile-security-framework-mobsf](https://awesome-repositories.com/repository/mobsf-mobile-security-framework-mobsf.md) (21,224 ⭐) — Mobile Security Framework is an automated security testing platform designed for the analysis of Android, iOS, and Windows mobile application binaries. It functions as a comprehensive suite for identifying security vulnerabilities, privacy risks, and malicious code within mobile software packages.

The framework distinguishes itself by combining static and dynamic analysis techniques to evaluate application behavior. It performs static inspection of source code and binaries to detect insecure patterns, while simultaneously utilizing dynamic instrumentation and containerized sandboxing to monit
- [frida/frida](https://awesome-repositories.com/repository/frida-frida.md) (19,778 ⭐) — Frida is a dynamic binary instrumentation toolkit that provides a framework for deep process introspection and live application state manipulation. It enables the injection of custom scripts into running processes to trace function calls, modify memory, and analyze application behavior in real-time across diverse operating systems and processor architectures.

The project distinguishes itself by embedding a high-performance JavaScript engine directly within the target process, allowing for the execution of user-defined logic for real-time inspection. It utilizes instruction-level hooking to re
- [benoitc/gunicorn](https://awesome-repositories.com/repository/benoitc-gunicorn.md) (10,443 ⭐) — Gunicorn is a production-grade WSGI HTTP server designed for deploying Python web applications. It functions as a process manager that utilizes a pre-fork worker model, where a master process initializes the application and spawns multiple child processes to handle incoming requests in parallel. This architecture ensures high performance and stability by isolating application execution within persistent worker processes.

The server distinguishes itself through its flexible concurrency models and robust process lifecycle management. It supports interchangeable worker types, including synchrono
- [instrumental/instrumentald](https://awesome-repositories.com/repository/instrumental-instrumentald.md) (15 ⭐) — Instrumental System and Service Daemon
- [huiyadanli/revokemsgpatcher](https://awesome-repositories.com/repository/huiyadanli-revokemsgpatcher.md) (37,926 ⭐) — RevokeMsgPatcher is a binary patching utility designed to modify the execution logic of desktop messaging applications. By applying low-level changes to compiled executable files and libraries, the tool enables functionality not natively supported by the original software, specifically focusing on message persistence and process management.

The utility distinguishes itself through targeted binary instrumentation and control flow redirection. It identifies specific function patterns and memory offsets within proprietary software to inject custom assembly instructions. These modifications allow
- [mtobisch/ngx-dynamic-hooks](https://awesome-repositories.com/repository/mtobisch-ngx-dynamic-hooks.md) (126 ⭐) — Automatically insert live Angular components into dynamic strings (based on their selector or any pattern of your choice) and render the result in the DOM.
- [dioxuslabs/dioxus](https://awesome-repositories.com/repository/dioxuslabs-dioxus.md) (36,400 ⭐) — Dioxus is a cross-platform development framework designed for building native desktop, mobile, and web applications from a single codebase. It utilizes a declarative component model and macro-powered syntax to define reusable interface elements, which are then rendered as native widgets or web elements. At its core, the framework employs a signal-based reactivity system that tracks state dependencies to trigger granular updates, ensuring efficient interface performance without re-rendering the entire application tree.

The framework distinguishes itself through a unified full-stack runtime tha
- [x64dbg/x64dbg](https://awesome-repositories.com/repository/x64dbg-x64dbg.md) (48,652 ⭐) — This project is a graphical Windows debugger designed for the analysis and manipulation of compiled binary applications. It functions as a comprehensive binary analysis suite, providing a real-time environment for inspecting CPU registers, monitoring memory states, and tracing instruction execution to investigate system-level software behavior.

The tool distinguishes itself through an event-driven debugging loop that allows for precise process control and state modification during runtime. It supports advanced analysis techniques, including hardware-breakpoint injection for monitoring memory
- [undeadlabs/instrumental-ex](https://awesome-repositories.com/repository/undeadlabs-instrumental-ex.md) (10 ⭐) — An Elixir client for Instrumental
- [mobile-dev-inc/maestro](https://awesome-repositories.com/repository/mobile-dev-inc-maestro.md) (10,788 ⭐) — Maestro is a declarative mobile and web UI automation framework designed for end-to-end testing. It operates by querying the native accessibility tree of an application, allowing for black-box testing without requiring source code instrumentation or platform-specific dependencies.

The framework distinguishes itself through a unified command syntax that abstracts interactions across Android, iOS, and web environments. It features a dynamic synchronization engine that automatically pauses test execution to account for non-deterministic animations and network-dependent content loading, ensuring
- [cheat-engine/cheat-engine](https://awesome-repositories.com/repository/cheat-engine-cheat-engine.md) (18,453 ⭐) — Cheat Engine is a software reverse engineering suite and memory editor designed for the Windows environment. It functions as a comprehensive platform for inspecting, analyzing, and modifying the internal logic and data structures of running applications.

The tool provides capabilities for real-time memory scanning and manipulation, allowing users to locate and alter specific values within a process's address space. It distinguishes itself through advanced debugging features, including hardware-assisted debugging, kernel-mode driver injection for bypassing memory protections, and dynamic binar
- [google/allocation-instrumenter](https://awesome-repositories.com/repository/google-allocation-instrumenter.md) (0 ⭐) — The Allocation Instrumenter is a Java agent written using the [java.lang.instrument][] API and [ASM][]. Each allocation in your Java program is instrumented; a user-defined callback is invoked on each allocation.
- [gofiber/fiber](https://awesome-repositories.com/repository/gofiber-fiber.md) (39,849 ⭐) — Fiber is a high-performance web framework designed for building scalable HTTP services with minimal memory overhead. It provides a comprehensive runtime environment for managing the full request lifecycle, utilizing an optimized radix tree for high-speed route matching and an object pooling system to reduce garbage collection pressure during traffic processing.

The framework distinguishes itself through its multi-process architecture, which supports prefork socket reuse to distribute incoming traffic across all available CPU cores. It offers a modular approach to application development, feat
- [unicorn-engine/unicorn](https://awesome-repositories.com/repository/unicorn-engine-unicorn.md) (9,076 ⭐) — Unicorn is a multi-architecture CPU emulation framework and library that utilizes just-in-time compilation to execute instructions across various processor architectures, including ARM, x86, and RISC-V. It functions as both a JIT compilation engine and an instrumentation tool, allowing for the execution of machine code without the need for physical hardware.

The framework is distinguished by its hook-based execution instrumentation, which enables the interception of specific instructions and memory accesses to trigger custom callback functions. It provides a language-agnostic binding layer an
- [honojs/hono](https://awesome-repositories.com/repository/honojs-hono.md) (30,994 ⭐) — Hono is a lightweight web framework built on Web Standard APIs that executes across JavaScript runtimes including Cloudflare Workers, Deno, Bun, and Node.js.
- [dynamic-forms/dynamic-forms](https://awesome-repositories.com/repository/dynamic-forms-dynamic-forms.md) (24 ⭐) — Angular project for dynamic forms based on JSON
- [sbilly/awesome-security](https://awesome-repositories.com/repository/sbilly-awesome-security.md) (14,022 ⭐) — This project is a comprehensive, curated directory of cybersecurity resources, software, and documentation designed to support system and network protection. It serves as a centralized knowledge base and index for security professionals, aggregating industry-standard practices and open-source tools across a wide range of technical domains.

The repository distinguishes itself by providing a structured collection of methodologies and frameworks for security operations. It covers critical areas including threat intelligence, digital forensics, infrastructure auditing, and vulnerability assessmen
- [facebook/react](https://awesome-repositories.com/repository/facebook-react.md) (245,669 ⭐) — React is a JavaScript library for building user interfaces based on a component-driven architecture and unidirectional data flow.
- [hook-lang/hook](https://awesome-repositories.com/repository/hook-lang-hook.md) (119 ⭐) — Hook is a simple, cross-platform, dynamically typed scripting language that utilizes a mutable value semantics approach. It was developed from scratch using C and employs clear and simple techniques such as recursive descent parsing, stack-based virtual machine, and reference counting.
- [revanced/revanced-manager](https://awesome-repositories.com/repository/revanced-revanced-manager.md) (25,932 ⭐) — ReVanced Manager is an Android application patcher designed to modify compiled mobile binaries. It enables users to inject custom features, alter runtime behavior, and remove interface elements without requiring access to original source code.

The utility distinguishes itself by performing all operations locally on the user device, ensuring privacy by avoiding external server dependencies. It automates the entire modification lifecycle, including the retrieval of application files, the application of bytecode-level patches, and the generation of new cryptographic signatures to ensure the resu
- [ethereum/go-ethereum](https://awesome-repositories.com/repository/ethereum-go-ethereum.md) (51,178 ⭐) — Geth is a comprehensive execution client for the Ethereum network, serving as a foundational node implementation that processes transactions, maintains the distributed ledger state, and participates in peer-to-peer consensus. It provides a robust infrastructure for synchronizing, validating, and serving blockchain data, utilizing a persistent Merkle Patricia Trie database to ensure the cryptographic integrity of historical records. As a sandboxed smart contract runtime, it executes bytecode according to deterministic protocol rules, enabling the deployment and interaction of decentralized appl
- [kubernetes/kubernetes](https://awesome-repositories.com/repository/kubernetes-kubernetes.md) (123,197 ⭐) — Kubernetes is a distributed container orchestration platform that automates the deployment, scaling, and management of containerized applications across clusters of computing nodes. It functions as a declarative infrastructure controller, utilizing a control loop architecture that continuously monitors the current system state against user-defined configurations to ensure desired operational outcomes. The system relies on a centralized API-driven interface and a replicated key-value store to maintain a consistent source of truth for all cluster objects.

The platform distinguishes itself throu
- [trallnag/prometheus-fastapi-instrumentator](https://awesome-repositories.com/repository/trallnag-prometheus-fastapi-instrumentator.md) (1,467 ⭐) — Instrument your FastAPI with Prometheus metrics.
- [infisical/infisical](https://awesome-repositories.com/repository/infisical-infisical.md) (27,374 ⭐) — Infisical is a centralized secrets management platform designed to store, synchronize, and control access to sensitive credentials and configuration data across distributed development, staging, and production environments. It employs client-side encryption to ensure that secrets remain unreadable to the underlying storage infrastructure, while providing a hierarchical permission model to govern both user and machine access.

The platform distinguishes itself through dynamic credential provisioning, which generates short-lived access tokens that are automatically revoked after use. It supports
- [thumlp/internal](https://awesome-repositories.com/repository/thumlp-internal.md) (1 ⭐) — Code of the NeurIPS 2025 paper "Investigating and Mitigating Catastrophic Forgetting in Medical Knowledge Injection through Internal Knowledge Augmentation Learning"
- [google-gemini/gemini-cli](https://awesome-repositories.com/repository/google-gemini-gemini-cli.md) (105,341 ⭐) — This project provides a command-line interface for managing autonomous agent workflows, task orchestration, and system-level automation. It includes a comprehensive framework for defining agent skills, managing persistent memory, and delegating tasks to specialized subagents. Users can configure complex planning modes, execute shell commands with safety constraints, and integrate external tools through standardized protocols.

The platform supports non-interactive execution via a headless mode and provides an event-driven hook framework for custom lifecycle automation. It features centralized
- [go-delve/delve](https://awesome-repositories.com/repository/go-delve-delve.md) (24,605 ⭐) — Delve is a command-line debugger designed for programs written in the Go programming language. It provides an interactive interface for runtime analysis, allowing developers to control program execution, inspect memory and variable states, and navigate call stacks to identify logic errors.

The tool distinguishes itself through deep integration with the Go runtime, specifically by providing goroutine-aware stack unwinding and the ability to manage concurrent execution threads. It utilizes a client-server protocol to decouple the debugger engine from the user interface, enabling both local and
- [gnustavo/git-hooks](https://awesome-repositories.com/repository/gnustavo-git-hooks.md) (42 ⭐) — Framework for implementing Git (and Gerrit) hooks
- [instrument/vicinity](https://awesome-repositories.com/repository/instrument-vicinity.md) (380 ⭐) — Vicinity replicates iBeacons and supports broadcasting and detecting low-energy bluetooth devices in the background.
- [m0bilesecurity/rms-runtime-mobile-security](https://awesome-repositories.com/repository/m0bilesecurity-rms-runtime-mobile-security.md) (2,971 ⭐) — This project is an Android security analysis toolkit and mobile app runtime manipulator designed for reverse engineering and auditing mobile applications. It provides a system for modifying Java classes and method behavior in active mobile processes to bypass security controls.

The toolkit includes a web-based interface for controlling the instrumentation engine and a specialized utility for disabling certificate validation to intercept and inspect encrypted network traffic via SSL pinning bypass. It also features an Android file explorer for browsing and managing files within private data di
- [fincept-corporation/finceptterminal](https://awesome-repositories.com/repository/fincept-corporation-finceptterminal.md) (26,900 ⭐) — FinceptTerminal is a quantitative finance platform and financial engineering library designed for asset valuation, risk management, and fixed-income analytics. It provides a comprehensive suite for algorithmic trading and investment strategy automation, integrating specialized language model agents and node-based workflows to automate market research and alpha generation.

The project distinguishes itself with a dedicated game theory analysis engine for calculating Nash equilibria and simulating strategic interactions in competitive markets. It also features a specialized credit risk modeling
- [addyosmani/agent-skills](https://awesome-repositories.com/repository/addyosmani-agent-skills.md) (60,849 ⭐) — Agent-skills is a collection of structured instructions and behavioral personas designed to standardize how AI coding agents perform engineering tasks. It functions as a workflow orchestrator that maps natural language intent to repeatable technical sequences and verification checklists.

The project distinguishes itself through the use of specialized markdown-defined roles, such as security auditors or test engineers, to apply targeted domain expertise. It employs an evidence-based verification model that requires runtime data or passing tests as mandatory exit criteria to ensure AI-generated
- [alibaba/opentelemetry-go-auto-instrumentation](https://awesome-repositories.com/repository/alibaba-opentelemetry-go-auto-instrumentation.md) (869 ⭐) — OpenTelemetry Compile-Time Instrumentation for Golang
- [iovisor/bcc](https://awesome-repositories.com/repository/iovisor-bcc.md) (22,459 ⭐) — BCC is an eBPF development toolkit and tracing framework used for monitoring and analyzing the Linux kernel. It functions as a performance analysis tool and debugging utility to capture system events, measure kernel latency, and provide network observability.

The project distinguishes itself by providing a build system that integrates with LLVM to compile C-like code into BPF bytecode at runtime. It utilizes BPF Type Format data for relocations to maintain cross-kernel compatibility and extracts kernel headers to ensure the generated programs match the specific kernel version.

The toolkit co
- [huihut/interview](https://awesome-repositories.com/repository/huihut-interview.md) (37,972 ⭐) — This project is a comprehensive technical knowledge base designed to support developers in mastering systems programming and preparing for technical assessments. It provides a structured collection of fundamental computer science concepts, mapping high-level language constructs to low-level hardware memory layouts, runtime object lifecycles, and system-level operations.

The repository distinguishes itself through a hierarchical approach that bridges the gap between theoretical principles and practical implementation. It offers detailed guidance on C++ language mechanisms, standard library usa
- [sindresorhus/internal-ip](https://awesome-repositories.com/repository/sindresorhus-internal-ip.md) (350 ⭐) — ``sh npm install internal-ip ``
- [internlm/intern-s1](https://awesome-repositories.com/repository/internlm-intern-s1.md) (814 ⭐) — 🤗Intern-S2 Model Collections • 🤗Intern-S1 Model Collections • ModelScope • 📜Technical Report(S1) • 📜Technical Report(S1-Pro) • 💬Online Chat
- [waydabber/betterdisplay](https://awesome-repositories.com/repository/waydabber-betterdisplay.md) (32,337 ⭐) — BetterDisplay is a comprehensive display management utility and virtual display engine designed to provide granular control over monitor configurations. It functions as a low-level hardware controller that interacts directly with graphics drivers and system APIs to override manufacturer limitations, enabling users to manage resolution, scaling, brightness, and color profiles across complex multi-monitor setups.

The project distinguishes itself through its ability to generate synthetic virtual displays and inject custom framebuffers into the graphics pipeline, allowing for arbitrary resolution
- [valvesoftware/proton](https://awesome-repositories.com/repository/valvesoftware-proton.md) (31,868 ⭐) — Proton is a compatibility layer designed to enable the execution of Windows-based software on non-Windows operating systems. It functions as a controlled runtime environment that maps proprietary system calls to native kernel functions and translates graphics API commands into open-standard compute shaders. This allows applications to run without requiring modifications to their original source code.

The project distinguishes itself through a robust toolchain for reproducible builds, which utilizes containerized isolation to ensure consistent binary outputs across different development enviro
- [esri/spatial-framework-for-hadoop](https://awesome-repositories.com/repository/esri-spatial-framework-for-hadoop.md) (376 ⭐) — The Spatial Framework for Hadoop allows developers and data scientists to use the Hadoop data processing system for spatial data analysis.
- [bazelbuild/bazel](https://awesome-repositories.com/repository/bazelbuild-bazel.md) (25,529 ⭐) — Bazel is a multi-language build automation engine designed to manage complex dependency graphs and execute compilation tasks for massive codebases. It functions as a hermetic build environment, utilizing sandboxed execution and content-addressable caching to ensure that build artifacts are reproducible and that identical tasks are never re-executed. By modeling dependencies as a directed acyclic graph, the system determines optimal execution order and identifies tasks that can run in parallel.

The project distinguishes itself through its support for distributed build execution, allowing resou
- [valinet/explorerpatcher](https://awesome-repositories.com/repository/valinet-explorerpatcher.md) (32,948 ⭐) — ExplorerPatcher is a system utility designed to modify the behavior of the Windows shell by injecting custom code into core operating system processes. It functions as a background patching tool that intercepts internal function calls and replaces modern interface components with legacy alternatives, allowing for the restoration of traditional taskbar, menu, and task switcher behaviors.

The project distinguishes itself through its use of dynamic link library injection and side-by-side binary replacement to alter the desktop environment at runtime. By redirecting execution flow within the syst
- [crowdsecurity/crowdsec](https://awesome-repositories.com/repository/crowdsecurity-crowdsec.md) (12,574 ⭐) — CrowdSec is a collaborative, distributed security engine designed for threat detection and infrastructure protection. It functions as an intrusion detection system that parses logs and network traffic to identify malicious patterns, utilizing a bucket-based threshold detection model to aggregate events and trigger alerts. The platform is built on a modular architecture that includes a centralized local API server for managing security signals and a relational database for persistent storage of remediation decisions.

What distinguishes the project is its decoupled enforcement model, which offl
- [leset0ng/gpui-hooks](https://awesome-repositories.com/repository/leset0ng-gpui-hooks.md) (16 ⭐) — A Rust library that adds React-style Hook system to the GPUI framework.
- [wix/detox](https://awesome-repositories.com/repository/wix-detox.md) (11,949 ⭐) — Detox is a gray-box end-to-end testing framework designed for mobile applications. It automates user interactions and verifies interface states by synchronizing test execution with the internal readiness of the application, ensuring that scripts wait for background tasks, network requests, and animations to complete before proceeding.

The framework distinguishes itself through native-side binary instrumentation, which allows it to monitor the application message queue and query the native view hierarchy in real time. By interacting directly with the application process, it avoids reliance on
- [rpav/dynamic-mixins](https://awesome-repositories.com/repository/rpav-dynamic-mixins.md) (32 ⭐) — Simple, dynamic class combination for CLOS.
- [go-swagger/go-swagger](https://awesome-repositories.com/repository/go-swagger-go-swagger.md) (9,989 ⭐) — go-swagger is a toolkit for working with Swagger/OpenAPI 2.0 specifications in Go. It generates server, client, and CLI code from a specification document, and can also produce a specification by scanning annotated Go source code. The project includes a static validation engine that checks documents against the schema and project-specific rules, and a specification transformation pipeline that resolves, flattens, and merges documents.

The toolkit generates both client and server code from the same specification, ensuring consistency in request and response handling. It also produces a command
- [filamentphp/filament](https://awesome-repositories.com/repository/filamentphp-filament.md) (31,215 ⭐) — Filament is a full-stack framework for building administrative panels and management interfaces within the Laravel ecosystem. It provides a declarative, component-based architecture that allows developers to construct complex, data-driven applications using server-side configuration objects rather than manual HTML. By inspecting database model structures and relationships, the framework automates the generation of CRUD interfaces, forms, and data tables, significantly reducing boilerplate code.

The project distinguishes itself through a highly modular and extensible design that supports custo
- [theintern/intern](https://awesome-repositories.com/repository/theintern-intern.md) (4,343 ⭐) — A next-generation code testing stack for JavaScript.
- [mrpond/blockthespot](https://awesome-repositories.com/repository/mrpond-blockthespot.md) (12,524 ⭐) — BlockTheSpot is a utility designed to modify the behavior of the Spotify desktop application. It functions as an audio stream modifier and media patch, altering the application's runtime execution to remove built-in limitations.

The tool specifically targets the suppression of audio and video advertisements during media sessions. It also removes navigation restrictions, allowing users to bypass track skipping limits within the desktop player.

These modifications are achieved through dynamic library injection and function hooking, which intercept and redirect execution flow within the applica