awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
RikkaApps avatar

RikkaApps/RiruArchived

0
View on GitHub↗
5,139 stars·597 forks·C++·20 views

Riru

Riru is an Android zygote injection framework and system process modifier. It allows for the insertion of custom code into the Android zygote process, enabling the execution of logic within all spawned applications and the system server.

The tool provides memory masking capabilities to hide strings and module signatures from process memory scanners. This is achieved by converting named memory segments and core memory into anonymous pages, modifying the process address space layout to obfuscate the presence of injected modules.

The framework also covers low-level system integration, including dynamic library loading and the interception of internal system server functions to modify core operating system behavior.

Features

  • Zygote Injection Frameworks - Provides a framework for injecting custom code into the Android Zygote process for system-wide modifications.
  • Zygote Code Injectors - Implements specialized tools for injecting custom machine code into the Android Zygote process.
  • System Server Injections - Provides injections into the system_server process to modify system-level services and behaviors.
  • System Process Hooks - Injects custom code into system-level Android processes to modify behavior without altering binaries.
  • Android System Process Injectors - Injects custom code into Android system processes to modify behavior without modifying system binaries.
  • Process Memory Hiding - Provides techniques to conceal modified process memory from system integrity scanners and detection tools.
  • Dynamic Library Loading - Implements mechanisms for loading native binary modules into a running process at runtime.
  • Android Anti-Detection - Prevents security tools and scanners from detecting unauthorized modifications within process memory maps.
  • Address Space Obfuscation - Modifies the process address space layout to obfuscate the presence of injected code and third party modules.

Star history

Star history chart for rikkaapps/riruStar history chart for rikkaapps/riru

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Projects sharing features with Riru

These projects share indexed features with Riru. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • elderdrivers/edxposedElderDrivers avatar

    ElderDrivers/EdXposed

    5,658View on GitHub↗

    Elder driver Xposed Framework.

    Javaandroidandroid-frameworkandroid-pie
    View on GitHub↗5,658
  • performanc/rezygiskPerformanC avatar

    PerformanC/ReZygisk

    3,109View on GitHub↗

    ReZygisk is an Android root module framework and Zygote process injector. It functions as a native hooking engine and linker redirection tool designed to inject custom code into the Android Zygote process so that modifications are inherited by all spawned applications. The project provides a decoupled abstraction layer and Zygisk API implementation, allowing system modules to operate independently of specific root management tools. This ensures that root modules remain stable and compatible across various kernel-level rooting solutions. The framework includes capabilities for system process

    Candroidapatchinjection
    View on GitHub↗3,109
  • dr-tsng/zygisknextDr-TSNG avatar

    Dr-TSNG/ZygiskNext

    8,605View on GitHub↗

    ZygiskNext is an Android rooting integration layer and system hooking framework. It functions as a code injector for the Android Zygote process, allowing for the modification of system behavior across various rooting environments and superuser managers. The project provides a specialized API to intercept and modify low-level system calls. This enables the injection of custom code into the base process that spawns applications, facilitating deep Android system customization and rooted development. The framework utilizes dynamic library loading, hook-based runtime modification, and Java Native

    androidkernelsumagisk
    View on GitHub↗8,605
  • rovo89/xposedbridgerovo89 avatar

    rovo89/XposedBridge

    4,067View on GitHub↗

    XposedBridge is an Android Java hooking framework and bytecode instrumentation engine. It functions as a runtime system for intercepting and modifying Java method calls within the Android operating system and installed applications. The project provides a mechanism for zygote process injection, ensuring that all spawned applications inherit the instrumentation logic. It enables the modification of internal Android system behaviors through method proxying and Java reflection to access private internal system members. The framework supports dynamic Android instrumentation and runtime analysis,

    JavaScriptandroidxposed
    View on GitHub↗4,067
Compare all 30 related projects→

Frequently asked questions

What does rikkaapps/riru do?

Riru is an Android zygote injection framework and system process modifier. It allows for the insertion of custom code into the Android zygote process, enabling the execution of logic within all spawned applications and the system server.

What are the main features of rikkaapps/riru?

The main features of rikkaapps/riru are: Zygote Injection Frameworks, Zygote Code Injectors, System Server Injections, System Process Hooks, Android System Process Injectors, Process Memory Hiding, Dynamic Library Loading, Android Anti-Detection.

Which projects share features with rikkaapps/riru?

Projects with overlapping indexed features include: elderdrivers/edxposed — Elder driver Xposed Framework. performanc/rezygisk — ReZygisk is an Android root module framework and Zygote process injector. It functions as a native hooking engine and… dr-tsng/zygisknext — ZygiskNext is an Android rooting integration layer and system hooking framework. It functions as a code injector for… rovo89/xposedbridge — XposedBridge is an Android Java hooking framework and bytecode instrumentation engine. It functions as a runtime… mywalkb/lsposed_mod — LSPosed_mod is a system for Android system hooking and module management. It enables the installation and… rovo89/xposed — Xposed is a native Android runtime hooking framework and instrumentation tool. It provides a modified version of the…