
linux-insides
A book-in-progress about the Linux kernel and its insides.

A book-in-progress about the Linux kernel and its insides.

SALT - SLUB ALlocator Tracer for the Linux kernel

Patching and hooking the Linux kernel with only a stripped Linux kernel image.


Patches and hooks the Linux kernel using only a stripped kernel image, extracting symbols and injecting code for inline and syscall hooking on arm64.


Hardening kernel C parsers via Rust rewrite + differential fuzzing + formal verification. First target: UVC (CVE-2024-53104).

Linux kernel 4.1.15 source code snapshot for analyzing and studying CVE-2022-3564, a vulnerability in the kernel's network subsystem.

A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)

JIT-based userspace Linux kernel that runs containers natively on Apple Silicon macOS without a VM. Drop-in Docker Engine API replacement with…

Walk any memory dump. Find what's hidden. Linux + Windows kernel forensics from a single static Rust binary — no Python required.

Distributed, code-coverage guided snapshot-based fuzzer for user and kernel-mode targets on Windows and Linux, with emulator and hypervisor backends.

Tools for Linux kernel debugging on Bochs (including symbols, native Bochs debugger and IDA PRO)

Zero-dependency Linux memory forensics, leveraging kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug info.

AndroidDriveSignity is a Python utility designed to bypass driver signature verification in Android kernel(ARMv8.3), facilitating the loading of…

LID — Linux Integrity Drift: Bypassing AppArmor via eBPF pathname rewriting. Pre-LSM syscall argument manipulation with zero audit footprint. "Linux…

Linux kernel source tree modified for CVE-2020-14356, providing a reference for vulnerability analysis and exploitation research.

AFL/QEMU fuzzing with full-system emulation.