Awesome GitHub RepositoriesRuntime Execution Interception

jvm-sandbox is a bytecode instrumentation framework and plugin container for the Java Virtual Machine. It acts as a runtime application modifier that enables the injection and modification of bytecode in a running process without requiring an application restart or changes to the original source code. The system provides a non-invasive aspect-oriented programming framework to intercept method execution and alter behavior in live processes. It functions as an isolated environment for functional modules, employing a custom class loader hierarchy to prevent dependency conflicts between plugins a

BlocksKit is a low-level utility library for Apple platform development, specifically designed for managing the execution flow and memory of blocks within macOS and iOS applications. It provides a collection of helper functions to simplify the use of blocks in Objective-C and C, reducing boilerplate code and addressing inherent technical limitations. The library focuses on bridging Objective-C blocks with legacy C-based APIs by providing compatible wrapper structures and function-pointer emulation. It enables the passing of blocks through system interfaces that require strict C-style callback

Harmony is a library for modifying, replacing, and decorating compiled .NET and Mono methods during execution without altering binary files on disk. It functions as a runtime method patching tool, a CIL instruction manipulator, and a reflection extension for C#. The project provides mechanisms to intercept method execution, allowing custom code to run before or after original methods while maintaining the existing program flow. It enables the analysis and rewriting of Common Intermediate Language instructions to change the internal logic of compiled methods. The toolkit also includes utiliti

Epic este un toolkit pentru instrumentarea runtime-ului Android, interceptarea metodelor și auditarea posturii de securitate. Funcționează ca un framework de programare orientată pe aspecte și un interceptor de metode dinamic conceput pentru a monitoriza și altera comportamentul metodelor Java în cadrul Android Runtime. Proiectul oferă capabilități pentru interceptarea și modificarea atât a componentelor framework-ului Android de bază, cât și a logicii specifice aplicației. Acest lucru permite injectarea de comportament Java personalizat și redirecționarea execuției metodelor fără a altera codul sursă original. Framework-ul include instrumente pentru auditarea securității aplicațiilor, care implică scanarea pentru shell-uri încorporate și monitorizarea utilizării API-urilor de sistem sensibile. Aceste funcții de observabilitate permit analiza fluxului de date și verificarea posturilor de securitate în timpul execuției la runtime.

HyperDbg is a hardware-assisted kernel-mode debugging platform that leverages virtualization to monitor and control system execution. By utilizing hypervisor-level primitives, it enables deep system analysis and instrumentation without relying on standard operating system debugging interfaces. The framework provides a comprehensive environment for inspecting both kernel and user-mode processes, allowing for granular control over execution flow and system state. The project distinguishes itself through a transparent debugging layer designed to remain invisible to the target environment. It emp