17 Commits

Author SHA1 Message Date
BeneficialCode 2256c8260c No vcpkg when building kernel. 2024-09-14 16:48:40 +08:00
BeneficialCode ce25143812 The win32k system call numbers start with 0x1000 2024-07-07 10:34:16 +08:00
Beneficial 6343b22307 Add the hal layer dispatch tables. 2023-11-30 18:31:19 +08:00
Beneficial 41cfa78af9 Move the inline hook scan in the kernel module view. 2023-11-17 09:38:26 +08:00
BeneficialCode 03a74ccef2 Implemented the reflector function. 2023-11-01 07:54:15 +08:00
BeneficialCode 5b599e243d Analyze the code. 2023-10-29 13:47:46 +08:00
BeneficialCode e5f090dbec Fixup the memory overload. 2023-09-20 17:44:09 +08:00
BeneficialCode 8f1de2c958 Enhance the kernel inline hook scan. 2023-09-04 10:03:11 +08:00
BeneficialCode 8cf15c6dea Update the inline hook scan. 2023-09-01 18:33:57 +08:00
BeneficialCode ab67a358fe Now it can detect the ntoskrnl inline hook 2023-05-31 23:23:20 +08:00
BeneficialCode da3487e97f Add some kernel inline hook detect code. 2023-05-30 15:21:09 +08:00
BeneficialCode cb3fbee703 fixup a fatal bug in khook. 2023-05-28 21:39:46 +08:00
BeneficialCode a0e188510e Add the teb struct 2022-08-10 19:20:27 +08:00
BeneficialCode 79cd254a5e Fixup the ssdt table display 2022-01-02 11:16:00 +08:00
CORP\zengquan 9accdcec6e support the symbol fixup when system has updated 2021-11-26 10:15:14 +08:00
CORP\zengquan 85d736fe4c Add shadow ssdt function hook dected 2021-11-16 17:47:46 +08:00
CORP\zengquan e45bb192ac Delete some old source code 2021-11-14 12:27:47 +08:00