2 个仓库
Awesome GitHub RepositoriesProcess Memory Hiding
Techniques for concealing modified process memory from system integrity scanners and detection tools.
Distinct from Process Memory Scanners: No existing candidates cover the specific act of hiding process memory from security scanners; existing tags focus on scanning or partitioning.
Explore 2 awesome GitHub repositories matching operating systems & systems programming · Process Memory Hiding. Refine with filters or upvote what's useful.
Awesome Process Memory Hiding GitHub Repositories
用 AI 发现最棒的仓库。我们将通过 AI 为您搜索最匹配的仓库。
- rikkaapps/riru
RikkaApps/Riru
5,139在 GitHub 上查看Riru 是一个 Android Zygote 注入框架和系统进程修改器。它允许将自定义代码插入到 Android Zygote 进程中，从而实现在所有派生应用和系统服务（System Server）中执行逻辑。 该工具提供内存掩码功能，用于从进程内存扫描器中隐藏字符串和模块签名。这是通过将命名内存段和核心内存转换为匿名页，并修改进程地址空间布局来混淆注入模块的存在来实现的。 该框架还涵盖了底层系统集成，包括动态库加载以及拦截内部系统服务函数以修改核心操作系统行为。
Provides techniques to conceal modified process memory from system integrity scanners and detection tools.
C++androidriru - performanc/rezygisk
PerformanC/ReZygisk
3,109在 GitHub 上查看ReZygisk is an Android root module framework and Zygote process injector. It functions as a native hooking engine and linker redirection tool designed to inject custom code into the Android Zygote process so that modifications are inherited by all spawned applications. The project provides a decoupled abstraction layer and Zygisk API implementation, allowing system modules to operate independently of specific root management tools. This ensures that root modules remain stable and compatible across various kernel-level rooting solutions. The framework includes capabilities for system process
Bypasses security checks and linker detection to keep modified processes hidden from integrity scanners.
Candroidapatchinjection
