BeneficialCode
|
2256c8260c
|
No vcpkg when building kernel.
|
2024-09-14 16:48:40 +08:00 |
|
BeneficialCode
|
ce25143812
|
The win32k system call numbers start with 0x1000
|
2024-07-07 10:34:16 +08:00 |
|
Beneficial
|
6343b22307
|
Add the hal layer dispatch tables.
|
2023-11-30 18:31:19 +08:00 |
|
Beneficial
|
41cfa78af9
|
Move the inline hook scan in the kernel module view.
|
2023-11-17 09:38:26 +08:00 |
|
BeneficialCode
|
03a74ccef2
|
Implemented the reflector function.
|
2023-11-01 07:54:15 +08:00 |
|
BeneficialCode
|
5b599e243d
|
Analyze the code.
|
2023-10-29 13:47:46 +08:00 |
|
BeneficialCode
|
e5f090dbec
|
Fixup the memory overload.
|
2023-09-20 17:44:09 +08:00 |
|
BeneficialCode
|
8f1de2c958
|
Enhance the kernel inline hook scan.
|
2023-09-04 10:03:11 +08:00 |
|
BeneficialCode
|
8cf15c6dea
|
Update the inline hook scan.
|
2023-09-01 18:33:57 +08:00 |
|
BeneficialCode
|
ab67a358fe
|
Now it can detect the ntoskrnl inline hook
|
2023-05-31 23:23:20 +08:00 |
|
BeneficialCode
|
da3487e97f
|
Add some kernel inline hook detect code.
|
2023-05-30 15:21:09 +08:00 |
|
BeneficialCode
|
cb3fbee703
|
fixup a fatal bug in khook.
|
2023-05-28 21:39:46 +08:00 |
|
BeneficialCode
|
a0e188510e
|
Add the teb struct
|
2022-08-10 19:20:27 +08:00 |
|
BeneficialCode
|
79cd254a5e
|
Fixup the ssdt table display
|
2022-01-02 11:16:00 +08:00 |
|
CORP\zengquan
|
9accdcec6e
|
support the symbol fixup when system has updated
|
2021-11-26 10:15:14 +08:00 |
|
CORP\zengquan
|
85d736fe4c
|
Add shadow ssdt function hook dected
|
2021-11-16 17:47:46 +08:00 |
|
CORP\zengquan
|
e45bb192ac
|
Delete some old source code
|
2021-11-14 12:27:47 +08:00 |
|