GithubStar/WinArk
1
0
Fork 0
mirror of https://github.com/BeneficialCode/WinArk.git synced 2026-10-18 05:36:10 +08:00
Code Issues Packages Projects Releases Wiki Activity
470 Commits 1 Branch 1 Tag
master
Commit Graph

42 Commits

Author SHA1 Message Date
BeneficialCode f8cbf184f0 Add the kill process native method. 2024-07-07 11:26:12 +08:00
Beneficial 41cfa78af9 Move the inline hook scan in the kernel module view. 2023-11-17 09:38:26 +08:00
BeneficialCode 2f4b15a446 Add the object callback view. 2023-10-12 16:12:03 +08:00
BeneficialCode 1e7f39346f Don't verify the ssl cert. 2023-09-09 14:29:36 +08:00
BeneficialCode ed7ff58404 Hook hash search function. 2023-08-24 08:43:30 +08:00
BeneficialCode fa396262d6 Disable driver load by hook. 2023-08-23 22:48:44 +08:00
BeneficialCode ab6d13552b Enhance the explorer view. 2023-08-10 14:59:46 +08:00
BeneficialCode da3487e97f Add some kernel inline hook detect code. 2023-05-30 15:21:09 +08:00
BeneficialCode 5980c4e6b7 Support dump the windows extension table function 2023-03-06 22:56:13 +08:00
BeneficialCode 1cc419417f Support the WinExtHosts view 2023-03-06 17:34:31 +08:00
BeneficialCode 20e7833fdf Complete the kernel eat hook detect 2023-03-02 23:45:17 +08:00
BeneficialCode 60ee70445c Add the driver module dump interface. But it still has memory access violation. 2023-01-08 21:37:56 +08:00
BeneficialCode 3a7a8b9cc0 Add the EPROCESS info in process list 2023-01-08 09:11:18 +08:00
BeneficialCode abe307ae5f Can get the count of vad 2022-12-11 11:34:27 +08:00
CORP\zengquan c95e4e0727 Support remove the Minifilter callback 2022-09-29 16:05:44 +08:00
CORP\zengquan 6481124870 Bypass the vmp3.6 kernel debugger dectect. 2022-09-22 15:58:16 +08:00
CORP\zengquan 0a702f8899 Add the MiniFilter callback enum 2022-09-07 19:54:43 +08:00
BeneficialCode abb87b6c30 Add some enum io timer bug code 2022-08-28 22:36:07 +08:00
BeneficialCode 3cc29057ad Fixup the x86 code bug! 2022-08-28 17:35:29 +08:00
CORP\zengquan 4a1052d569 Support enum the kernel timer (DPC) 2022-08-28 14:01:47 +08:00
CORP\zengquan 303569e737 Add the enum kernel timer object 2022-08-27 19:28:07 +08:00
CORP\zengquan e85218297a Fixup the system notify remove method bug 2022-08-26 15:22:05 +08:00
CORP\zengquan 16458951ad Support erase PreObOperation 2022-08-25 18:46:24 +08:00
BeneficialCode 36257b2f2a Fixup the symbol get method bugs 2022-08-06 20:30:50 +08:00
BeneficialCode b2cd4056d3 Delete the Config Window close handle function 2022-08-06 13:17:00 +08:00
CORP\zengquan 7c5de3c900 Get Registry Notify Count by CmpCallbackCount 2022-06-03 20:06:07 +08:00
CORP\zengquan 4a78703ea8 Add the registry callback enum 2022-06-03 17:35:24 +08:00
BeneficialCode f710715e81 1. Add the remove notify function 
2. Fixup the PAGE_FAULT_IN_NONPAGED_AREA
 2022-04-23 22:31:52 +08:00
BeneficialCode 8968b2ee5f Add the intercept the driver load and backup it 2022-02-20 11:55:44 +08:00
CORP\zengquan 9eaa534b7e Add the driver object dispatch routine lookup 2022-02-16 19:54:02 +08:00
BeneficialCode b3451b3fd1 Add the ObCallback Routine Dispaly 2022-01-02 20:54:51 +08:00
BeneficialCode 79cd254a5e Fixup the ssdt table display 2022-01-02 11:16:00 +08:00
BeneficialCode 5b2ec478c4 Add the PiDDBCacheTable and UnloadedDrivers Information Display 2022-01-01 15:47:39 +08:00
CORP\zengquan c425897cbe Build one struct that user mode can consume. 
Add the APC region.
 2021-12-31 18:31:06 +08:00
CORP\zengquan bdf62b0f20 Add the loaded and unloaded driver in the sys module 2021-12-30 17:32:19 +08:00
CORP\zengquan d067f44753 change the way to grab the ssdt 2021-12-25 10:58:04 +08:00
CORP\zengquan 6789a54cf4 Add Thread Notify 2021-11-29 10:46:20 +08:00
CORP\zengquan 3885ce3253 fixup the ssdt rva and windows focus on win7 2021-11-25 15:15:34 +08:00
CORP\zengquan 85d736fe4c Add shadow ssdt function hook dected 2021-11-16 17:47:46 +08:00
CORP\zengquan e45bb192ac Delete some old source code 2021-11-14 12:27:47 +08:00
CORP\zengquan bcbccde1aa update registry module 2021-10-26 16:12:26 +08:00
BeneficialCode 92474293af 添加项目文件。 2021-05-26 21:47:17 +08:00