{"id":22192746,"url":"https://github.com/ylarod/rootguard","last_synced_at":"2025-07-26T23:31:16.442Z","repository":{"id":265596244,"uuid":"579341652","full_name":"Ylarod/RootGuard","owner":"Ylarod","description":"A kernel module for protecting android rooted device","archived":false,"fork":false,"pushed_at":"2023-06-06T05:30:11.000Z","size":129,"stargazers_count":30,"open_issues_count":1,"forks_count":13,"subscribers_count":2,"default_branch":"main","last_synced_at":"2024-11-30T04:04:48.938Z","etag":null,"topics":["android","kernel","module"],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Ylarod.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-12-17T11:23:04.000Z","updated_at":"2024-11-13T10:56:59.000Z","dependencies_parsed_at":"2024-11-30T09:01:05.446Z","dependency_job_id":null,"html_url":"https://github.com/Ylarod/RootGuard","commit_stats":null,"previous_names":["ylarod/rootguard"],"tags_count":4,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Ylarod%2FRootGuard","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Ylarod%2FRootGuard/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Ylarod%2FRootGuard/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Ylarod%2FRootGuard/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Ylarod","download_url":"https://codeload.github.com/Ylarod/RootGuard/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":227732108,"owners_count":17811361,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["android","kernel","module"],"created_at":"2024-12-02T12:38:34.878Z","updated_at":"2024-12-02T12:38:35.440Z","avatar_url":"https://github.com/Ylarod.png","language":"C","readme":"# RootGuard\n\n一个防止格机的内核模块，支持内核5.10+\n\n**最好的防止格机的方法是不要执行不可信的程序**\n\n## 禁止规则\n\n1. `dd of=/dev/block`\n2. `rm` dirs below\n    ```C\n    char* rm_protect_dirs[] = {\n        \"/\",\n        \"/system/\",\n        \"/system_ext/\",\n        \"/data/\",\n        \"/vendor/\",\n        \"/product/\",\n        \"/sdcard/\",\n        \"/storage/emulated/0/\",\n        \"/storage/sdcard/\",\n        NULL\n    };\n    ```\n\n## 处理方案\n\n1. 发送 SIGKILL 信号杀死进程\n\n## 使用方法\n\n开启: `insmod RootGuard.ko`\n\n关闭: `rmmod RootGuard.ko`\n\n\n## 常见格机命令\n\n```bash\ndd if=/dev/zero of=/dev/block/sda bs=1M count=100\ndd if=/dev/zero of=/dev/block/sdb\ndd if=/dev/zero of=/dev/block/sdc\ndd if=/dev/zero of=/dev/block/sdd\ndd if=/dev/zero of=/dev/block/sde\ndd if=/dev/zero of=/dev/block/sdf\ndd if=/dev/zero of=/dev/block/sda1\ndd if=/dev/zero of=/dev/block/sda2\ndd if=/dev/zero of=/dev/block/sda3\ndd if=/dev/zero of=/dev/block/sda4\ndd if=/dev/zero of=/dev/block/sda5\ndd if=/dev/zero of=/dev/block/sda6\ndd if=/dev/zero of=/dev/block/sda7\ndd if=/dev/zero of=/dev/block/sda8\ndd if=/dev/zero of=/dev/block/sda9\ndd if=/dev/zero of=/dev/block/sda10\ndd if=/dev/zero of=/dev/block/sda11\ndd if=/dev/zero of=/dev/block/sda12\ndd if=/dev/zero of=/dev/block/sda13\n\ndd if=/dev/zero of=/dev/block/loop*\ndd if=/dev/zero of=$(magisk --path)/.magisk/block/system_root\n\nrm -rf /system\nrm -rf /data\nrm -rf /vendor\nrm -rf /product\nrm -rf /sdcard\nrm -rf /storage/emulated/0\nrm -rf /storage/sdcard\n\ndevices=`ls /dev/block/sd*`\nfor poweroff in ${devices}\ndo\necho \"poweroff\" \u003e ${poweroff}\ndone\n\nfor unonline in $(ls -aR /dev/block/*)\ndo\ndd if=/dev/urandom of=${unonline} bs=1k count=1\ndone\n```","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fylarod%2Frootguard","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fylarod%2Frootguard","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fylarod%2Frootguard/lists"}