{"id":31806786,"url":"https://github.com/fuqiuluo/android-wuwa","last_synced_at":"2025-10-11T03:50:17.806Z","repository":{"id":314264942,"uuid":"1024529006","full_name":"fuqiuluo/android-wuwa","owner":"fuqiuluo","description":"Android aarch64 kernel rootkit(driver module)","archived":false,"fork":false,"pushed_at":"2025-10-02T22:02:11.000Z","size":118,"stargazers_count":87,"open_issues_count":0,"forks_count":13,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-10-02T23:34:08.612Z","etag":null,"topics":["android","arm64","driver","kernel","kernel-module","linux-kernel","lkm-rootkit","rootkit","security-audit"],"latest_commit_sha":null,"homepage":"https://deepwiki.com/fuqiuluo/android-wuwa","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/fuqiuluo.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-07-22T21:04:00.000Z","updated_at":"2025-10-02T22:02:15.000Z","dependencies_parsed_at":"2025-10-02T23:24:47.286Z","dependency_job_id":"cfef0398-d109-47a3-a14b-677c824a8607","html_url":"https://github.com/fuqiuluo/android-wuwa","commit_stats":null,"previous_names":["fuqiuluo/android-wuwa"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/fuqiuluo/android-wuwa","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fuqiuluo%2Fandroid-wuwa","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fuqiuluo%2Fandroid-wuwa/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fuqiuluo%2Fandroid-wuwa/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fuqiuluo%2Fandroid-wuwa/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/fuqiuluo","download_url":"https://codeload.github.com/fuqiuluo/android-wuwa/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fuqiuluo%2Fandroid-wuwa/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279006108,"owners_count":26084026,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-11T02:00:06.511Z","response_time":55,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["android","arm64","driver","kernel","kernel-module","linux-kernel","lkm-rootkit","rootkit","security-audit"],"created_at":"2025-10-11T03:50:16.686Z","updated_at":"2025-10-11T03:50:17.789Z","avatar_url":"https://github.com/fuqiuluo.png","language":"C","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![Ask DeepWiki](https://deepwiki.com/badge.svg)](https://deepwiki.com/fuqiuluo/android-wuwa)\n\nJoin Group: 943577597\n\n# Features\n\n- [x] Custom protocol family for user-space (EL0) \n- [x] Virtual ⇄ physical address translation for any process\n- [x] Physical page descriptor lookup (flags, ref_count, and friends)\n- [x] One-step mapping of a process’s virtual memory into a DMA-BUF fd\n- [x] Page-table injections that bypass VMA\n- [x] Dump a process’s memory map straight to dmesg for easy inspection\n- [ ] Low-level page-table permission tweaks plus VMA permission masking \n- [x] Arbitrary physical memory read/write \n- [ ] Memory-scan traps for stealthy injection protection \n- [ ] Cross-process memory remap to build shared memory\n- [ ] EL1 channel based on exception vectors\n- [x] Kprobe blacklist bypass/disable\n- [x] Determine if the process is alive\n- [x] Get Module Base Addr\n- [x] Get process PID\n- [ ] Hide Process\n- [x] Give Root\n\n# How to Connect to the WuWa Driver\n\n[Click me](docs/FindDriver.md) for the connection guide.\n\n# Heads-up\n\n- Tested only on my device running kernel 6.1.\n- No guarantees on other versions; treat this as a proof of concept.\n- Everything not explicitly marked “planned” has been run and verified on my setup—use at your own risk.\n\n# Thanks\n\n- [Diamorphine](https://github.com/m0nad/Diamorphine)\n- [kernel-inline-hook-framework](https://github.com/WeiJiLab/kernel-inline-hook-framework)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffuqiuluo%2Fandroid-wuwa","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ffuqiuluo%2Fandroid-wuwa","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffuqiuluo%2Fandroid-wuwa/lists"}