Beneficial
|
41cfa78af9
|
Move the inline hook scan in the kernel module view.
|
2023-11-17 09:38:26 +08:00 |
|
BeneficialCode
|
0090d300ca
|
Avoid some warnings.
|
2023-06-19 18:18:26 +08:00 |
|
BeneficialCode
|
da3487e97f
|
Add some kernel inline hook detect code.
|
2023-05-30 15:21:09 +08:00 |
|
BeneficialCode
|
d17d899cab
|
Modified the DbgSys routines's name
|
2023-04-02 18:16:03 +08:00 |
|
BeneficialCode
|
f0d94ab648
|
Complete the DbgSys symbol init and hook DbgSys
|
2023-03-31 18:33:31 +08:00 |
|
BeneficialCode
|
114dc79729
|
Complete most of the DbgSys function
|
2023-03-30 22:49:13 +08:00 |
|
BeneficialCode
|
f072cc5fb9
|
Update the DbgSys code
|
2023-03-30 19:47:45 +08:00 |
|
BeneficialCode
|
0b31dae22e
|
Update code
|
2023-03-29 00:16:23 +08:00 |
|
BeneficialCode
|
5980c4e6b7
|
Support dump the windows extension table function
|
2023-03-06 22:56:13 +08:00 |
|
BeneficialCode
|
1cc419417f
|
Support the WinExtHosts view
|
2023-03-06 17:34:31 +08:00 |
|
BeneficialCode
|
72ecf6abc9
|
Support Kernel EAT hook scan
|
2023-03-02 18:34:12 +08:00 |
|
BeneficialCode
|
cf6cb13f49
|
Update DbgkCreateThread function
|
2023-02-25 08:52:13 +08:00 |
|
BeneficialCode
|
60ee70445c
|
Add the driver module dump interface. But it still has memory access violation.
|
2023-01-08 21:37:56 +08:00 |
|
BeneficialCode
|
996e7a6f6e
|
upload some png
|
2022-12-21 10:01:27 +08:00 |
|
BeneficialCode
|
abe307ae5f
|
Can get the count of vad
|
2022-12-11 11:34:27 +08:00 |
|
BeneficialCode
|
a535c36ac4
|
Merge the code
|
2022-12-06 19:54:59 +08:00 |
|
BeneficialCode
|
d4de2b40b7
|
Tweak some compile errors
|
2022-11-27 15:07:19 +08:00 |
|
BeneficialCode
|
34ea5246cc
|
Remove the struct define location
|
2022-11-26 13:35:38 +08:00 |
|
BeneficialCode
|
f7e8ddb966
|
Add go to the kernel module file location
|
2022-11-26 13:33:42 +08:00 |
|
BeneficialCode
|
289d6243be
|
Add the NtDebugActiveProcess function to DbgSys
|
2022-11-06 23:30:26 +08:00 |
|
BeneficialCode
|
b194029515
|
Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit
|
2022-11-06 16:53:45 +08:00 |
|
BeneficialCode
|
9f6f503108
|
Update the kernel inject code
|
2022-11-06 16:53:36 +08:00 |
|
CORP\zengquan
|
c95e4e0727
|
Support remove the Minifilter callback
|
2022-09-29 16:05:44 +08:00 |
|
CORP\zengquan
|
be83f5b1aa
|
Fixup a symbol pdb download error.
|
2022-09-08 13:32:54 +08:00 |
|
CORP\zengquan
|
0a702f8899
|
Add the MiniFilter callback enum
|
2022-09-07 19:54:43 +08:00 |
|
BeneficialCode
|
b705e5ab2f
|
Add some kernel inject dll code
|
2022-09-05 08:38:10 +08:00 |
|
CORP\zengquan
|
e45bb192ac
|
Delete some old source code
|
2021-11-14 12:27:47 +08:00 |
|