bytedance/bhook

Health v2 · maintenance only

Adoption not part of the score

2570 stars · 400 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

ByteHook is a production-grade Android PLT hook library written in C, supporting armeabi-v7a, arm64-v8a, x86, and x86_64. It lets native code intercept calls to functions in dynamic libraries via GOT/PLT hooking, with automatic handling of recursive calls and newly loaded libraries.

Use cases

• hook native functions in Android dynamic libraries
• intercept libc calls in an Android app at runtime
• monitor or replace native library function calls on Android
• patch native behavior without modifying library source
• debug native crashes with backtrace unwinding in proxy functions
• hook all or selected .so libraries in an Android process

When to choose

• you need stable, production-ready PLT/GOT hooking on Android 4.1+
• you need multi-architecture support including x86 and x86_64
• you want automatic hooking of newly loaded dynamic libraries
• you need to hook the same function from multiple callers safely

When to avoid

• you need inline hooking of arbitrary code addresses - use ByteDance's shadowhook instead
• you target platforms other than Android
• you need Java-level method hooking rather than native PLT hooking

Facets

library · maturity active

security reverse-engineering developer-tools android-tools developer-tools mobile-development cpp c plt-hook got-hook ndk native-hooking hooking android-native android

Member repositories

For agents

markdown · JSON · MCP: product_card(name="bytedance/bhook")