一个基于ptrace-seccomp简单的重定向openat的demo

一个Android通用svc跟踪以及hook方案——Frida-Seccomp

基于eBPF的堆栈追踪工具

基于eBPF的syscall追踪工具，适用于安卓平台

High-level tracing language for Linux

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, T…

bpf 学习仓库

High-level tracing language for Linux eBPF - development moved to https://github.com/iovisor/bpftrace

Generate eBPF programs and tracing with ChatGPT

BPF Processor for IDA Python

Provide powerful tools for seccomp analysis

Automated upstream mirror for libbpf stand-alone build.

Userspace eBPF runtime for Observability, Network, GPU & General Extensions Framework

Linux Kernel Runtime Integrity with eBPF

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

eBPF Developer Tutorial: Learning eBPF Step by Step with Examples

eBPF Android Debug Bridge

eBPF-based lightweight debugger for Android