1 个仓库
Inserts binary code into a running process while preserving relative address correctness for jumps and calls.
Distinct from Live Process Code Injection: Focuses on maintaining relative addressing (relocatability) during injection, rather than just the act of injecting binary code.
Explore 1 awesome GitHub repository matching operating systems & systems programming · Relocatable Code Injections. Refine with filters or upvote what's useful.
Dobby 是一个动态函数 Hook 框架和二进制插桩工具,旨在拦截和重定向编译二进制文件中的函数调用。它是一个跨平台、跨架构的库,为在不同操作系统和 CPU 架构上修改程序执行流提供了统一的接口。 该库通过向运行中的进程注入自定义处理程序,实现底层二进制插桩和运行时应用插桩。它常用于软件逆向工程,通过 Hook 内部函数来观察实时数据流和逻辑。 该框架涵盖了二进制补丁、运行时符号解析以及动态蹦床(trampoline)生成。它管理特定平台的内存保护,并将通用的 Hook 请求映射为特定架构的操作码,通过基于指令的 Hook 来重定向执行。
Injects custom logic into process memory while maintaining correct relative addresses for execution.