There are 1 repository under syscall-hook topic.
Patching and hooking the Linux kernel with only a stripped Linux kernel image.
Inline syscalls made for MSVC supporting x64 and WOW64
An example rootkit that gives a userland process root permissions
A Kernel module to break the kernel read-only to modify the syscall_table purpose (only in the Linux Arm64 6.6 Kernel test runs properly).
System call interception in linux-kernel module (kernel 2.6.34.7-61.fc13.x86_64)
HiddenGhost is an new solution for find system call table with support for 5.7x kernels +
Enumerate which window API calls are hooked by an EDR using inline patching technique
hodgepodge
Kernel space drivers(LKM) to intecept, monitor and manipulate system calls in android systems
Some custom Linux kernel modules written for own purposes or just as exercises