Awesome GitHub RepositoriesApplication Binary Modifications

LSPosed is an Android runtime hooking framework and in-memory code modifier. It functions as a system hooking tool that intercepts and modifies system and application methods in memory to change behavior without altering original installation files. The project provides a standardized interface through the Xposed Module API, allowing for the development of plugins that alter the behavior of the Android operating system and installed applications. The framework covers a range of capabilities including runtime function interception, Android system debugging, and application customization. Thes

BaiduNetdiskPlugin-macOS is a suite of macOS system extensions and tools designed to remove download speed limits and unlock premium features for the Baidu Netdisk client. It functions as a download speed unblocker and premium feature unlocker to enable maximum data transfer rates and activate SVIP status. The project includes a software update blocker that prevents the client from performing automatic updates to preserve the applied modifications. It achieves these results by removing local data transfer rate restrictions and eliminating trial duration limits.

Xposed is a native Android runtime hooking framework and instrumentation tool. It provides a modified version of the Android app process binary to intercept and modify the behavior of system and application processes at the binary level. The framework enables Android operating system customization by altering internal function calls and runtime execution flow. It achieves this through native process instrumentation, allowing for the modification of functionality without altering original application files. The tool covers several low-level capabilities, including native library injection and

uYouPlus is a modified iOS application binary that removes advertisements and unlocks premium playback features for non-jailbroken devices. It functions as an ad-blocking video client and enhanced video player designed to be installed via external signing tools rather than the official app store. The project enables the skipping of sponsored content using a community-driven database and allows users to bypass age restrictions and premium prompts. It unlocks high-resolution streaming options, including 2K and 4K playback, and supports background media playback and picture-in-picture mode. The

JPEX Software is a comprehensive reverse engineering suite for SWF binary files, serving as an ActionScript decompiler and editor. It provides a toolkit for decompiling, analyzing, and modifying the internal structure of compiled Flash content, including the extraction of scripts and media assets. The project is distinguished by its ability to perform direct binary modification, allowing users to edit bytecode and replace embedded resources without reverting to high-level source code. It includes a runtime ActionScript bytecode debugger for variable inspection and call stack analysis, as well

Auto-unlocker este o colecție de utilitare concepute pentru a modifica bibliotecile software-ului de virtualizare pentru a ocoli restricțiile de sistem pe sistemele de operare guest. Acesta funcționează în principal ca un patcher binar care permite selectarea și bootarea guest-urilor macOS în VMware. Proiectul modifică bibliotecile de sistem core pentru a debloca opțiunile ascunse de selectare a sistemului de operare și a ocoli verificările de boot pentru guest-urile neacceptate. De asemenea, include un installer de guest tools care descarcă și aplică pachetele de drivere necesare pentru integrarea hardware și performanță. Setul de instrumente oferă capabilități pentru gestionarea mediilor de mașini virtuale, inclusiv abilitatea de a restaura stările software originale prin revenirea modificărilor binare din backup-uri.

LSPosed_mod is a system for Android system hooking and module management. It enables the installation and configuration of system-level modifications to change device behavior without altering the original system image or source files. The project utilizes zygote-based process injection and runtime method hooking to intercept execution flows in memory. It includes a version-agnostic execution layer to maintain a consistent interface across different Android operating system versions and environments, as well as dynamic proxy interception to modify method arguments and return values. Manageme

Acest proiect este o resursă educațională care oferă un tutorial de dezvoltare cuprinzător pentru scrierea și încărcarea programelor eBPF folosind C, Go și Rust în kernel-ul Linux. Servește drept ghid tehnic pentru dezvoltarea logicii personalizate care să fie executată direct în kernel. Materialele acoperă domenii specializate, inclusiv observabilitatea și trasarea kernel-ului, implementarea securității pentru detectarea intruziunilor și ingineria rețelelor de înaltă performanță pentru filtrarea pachetelor și echilibrarea sarcinii. Include, de asemenea, manuale dedicate pentru trasarea kernel-ului Linux și utilizarea kprobes, uprobes și tracepoints. Proiectul cuprinde o gamă largă de domenii de capabilități, cum ar fi instrumentarea kernel-ului, monitorizarea și observabilitatea sistemului, analiza rețelei și aplicarea securității. Se extinde în continuare la depanarea la nivel hardware pentru GPU-uri și drivere, precum și la manipularea sistemului de nivel scăzut și gestionarea resurselor.

Miasm este un framework Python de reverse engineering conceput pentru analiză binară, dezasamblare și modificare. Funcționează ca un framework de analiză binară care ridică codul mașină într-o reprezentare intermediară pentru a permite cercetarea de securitate independentă de platformă. Sistemul operează ca un motor de emulare binară și toolkit de modificare, permițând execuția codului binar într-un mediu virtual pentru a urmări schimbările de stare fără hardware nativ. Oferă instrumente pentru patching binar, pentru a actualiza și modifica fișiere binare brute pe mai multe arhitecturi CPU și formate executabile. Framework-ul acoperă capabilități pentru dezasamblare, ridicarea reprezentării intermediare și simplificarea semantică pentru a elimina ofuscarea binară. Include suport pentru parsarea formatelor binare și maparea memoriei pentru a urmări referințele și layout-ul în timpul analizei programelor compilate.

Binsider is a collection of specialized toolsets for hexadecimal editing, ELF structural analysis, system call tracing, and execution performance profiling. It provides a suite of utilities designed for binary reverse engineering, encompassing both static structural analysis and dynamic runtime monitoring of compiled binaries. The project distinguishes itself by combining low-level binary manipulation, such as a hex editor for raw byte modification, with an ELF binary analysis tool for inspecting file structures and metadata. It also includes a Linux system call tracer for observing dynamic b

APKLab is an integrated development environment designed for Android reverse engineering and mobile application security analysis. It provides a comprehensive workbench that enables users to decompile, analyze, modify, and repackage mobile application binaries directly within a code editor. The platform distinguishes itself by combining static code analysis with dynamic instrumentation capabilities. It transforms compiled packages into readable source code and assembly logic, while simultaneously offering tools to inject runtime hooks, patch application behavior, and intercept encrypted netwo

YTLite is a modified YouTube client and a set of specialized extensions designed to provide expanded controls over playback, layout, and content visibility. It functions as a playback enhancer and interface customizer that allows for the modification of the native video platform experience. The project integrates SponsorBlock to automatically skip sponsored segments using community-driven timing data and restores the visibility of dislike counts on videos. It unlocks high-resolution streaming, enabling 2K and 4K playback, and provides a media downloader for saving videos, audio tracks, and im

This project is a suite of tools for scraping remote assets, applying binary modifications, and orchestrating the distribution of patched Android applications. It functions as an automated build pipeline that fetches remote assets and compiles patched binaries into installable packages. The system includes a specialized remote asset downloader designed to fetch application files and version metadata from remote servers while bypassing bot protections. It also operates as an Android app distribution system that uploads modified binaries to a repository and sends update notifications via Telegr