
rsyscall
Process-independent interface to Linux system calls

Process-independent interface to Linux system calls

Tools for Linux kernel debugging on Bochs (including symbols, native Bochs debugger and IDA PRO)

ltm is a machine-history debugger for Linux. It records process, file, network, memory, and block-I/O metadata via eBPF, then lets you query the…

A Linux version of the ProcDump Sysinternals tool

Linux syscall tracer using ptrace to monitor, debug, and analyze system calls, signal deliveries, and process state changes for diagnostics and…

Memory Debugger for Windows, Linux, Mac, and Android

Frida-based tracer for easier reverse-engineering on Android, iOS, Linux, Windows and most related architectures.

Disassemble ANY files including .so (NDK, JNI), Windows PE(EXE, DLL, SYS, etc), linux binaries, libraries, and any other files such as pictures,…

Drltrace is a library calls tracer for Windows and Linux applications.

BPF-based Linux IPC tracer for pipes, signals, Unix sockets, loopback, and pseudoterminals with metadata and content capture, filtering, and JSON…

disassembler, decompiler and debugger in one, with a built-in mcp server: point an ai at a binary and it can debug it, not just read it. ida-style…

Python library for examining Linux kernel SLUB heap allocations and structures within GDB, enabling deeper understanding of kernel heap internals for…

SALT - SLUB ALlocator Tracer for the Linux kernel

Learning Linux Binary Analysis, published by Packt

A modern syscall tracer built on eBPF. Think strace, but with a real TUI, smart filters, TLS decryption, and output that's actually readable.


Experimental Linux strace LLM agent

Heap buffer overflow exploit for CVE-2022-27666 in Linux kernel IPsec ESP6 implementation. Includes kernel build, debug setup with GDB stub, and…