There are 1 repository under syscall-hook topic.
Patching and hooking the Linux kernel with only a stripped Linux kernel image.
Inline syscalls made for MSVC supporting x64 and WOW64
An example rootkit that gives a userland process root permissions
A Kernel module to break the kernel read-only to modify the syscall_table purpose (only in the Linux Arm64 6.6 Kernel test runs properly).
System call interception in linux-kernel module (kernel 2.6.34.7-61.fc13.x86_64)
Kernel space drivers(LKM) to intecept, monitor and manipulate system calls in android systems
Enumerate which window API calls are hooked by an EDR using inline patching technique
HiddenGhost is an new solution for find system call table with support for 5.7x kernels +
IndirectSyscalls - A method of invoking syscalls without creating stubs and avoiding hooks - Winx64
hodgepodge
Some custom Linux kernel modules written for own purposes or just as exercises