Patching and hooking the Linux kernel with only a stripped Linux kernel image.

system call hook for Linux

Inline syscalls made for MSVC supporting x64 and WOW64

Advanced process execution monitoring utility for linux (procmon like)

An example rootkit that gives a userland process root permissions

A system call interception tool

System Call Hook for ARM64

System call interception in linux-kernel module (kernel 2.6.34.7-61.fc13.x86_64)

HiddenGhost is an new solution for find system call table with support for 5.7x kernels +

Map environment to/from redis

Enumerate which window API calls are hooked by an EDR using inline patching technique

Some custom Linux kernel modules written for own purposes or just as exercises

hodgepodge

Kernel space drivers(LKM) to intecept, monitor and manipulate system calls in android systems