FlipSwitch: a Novel Syscall Hooking Technique
Linux kernel 6.9 replaced the old sys_call_table direct dispatch with a switch-statement-based dispatcher, rendering traditional syscall hooking ineffective. The FlipSwitch technique bypasses this by...
hendryadrian.com