GithubStar/WinArk
1
0
Fork 0
mirror of https://github.com/BeneficialCode/WinArk.git synced 2026-10-26 02:18:15 +08:00
Code Issues Packages Projects Releases Wiki Activity
331 Commits 1 Branch 1 Tag
7a124faad435448c489a85ca890766967c784cff
Commit Graph
114 Commits
Author SHA1 Message Date
BeneficialCode 766f0e6485 Update the hook function. 2023-08-27 00:00:18 +08:00
BeneficialCode ed7ff58404 Hook hash search function. 2023-08-24 08:43:30 +08:00
BeneficialCode fa396262d6 Disable driver load by hook. 2023-08-23 22:48:44 +08:00
BeneficialCode ab6d13552b Enhance the explorer view. 2023-08-10 14:59:46 +08:00
BeneficialCode 0090d300ca Avoid some warnings. 2023-06-19 18:18:26 +08:00
BeneficialCode ab67a358fe Now it can detect the ntoskrnl inline hook 2023-05-31 23:23:20 +08:00
BeneficialCode da3487e97f Add some kernel inline hook detect code. 2023-05-30 15:21:09 +08:00
BeneficialCode cb3fbee703 fixup a fatal bug in khook. 2023-05-28 21:39:46 +08:00
BeneficialCode c218ca4695 Change the kdprint to LogInfo 2023-05-26 17:31:46 +08:00
BeneficialCode b5b7a983c8 Finish the ksocet tdi lib 2023-05-14 11:44:04 +08:00
BeneficialCode 9e295a3408 Add ksocket function to the lib. 2023-05-12 20:56:12 +08:00
BeneficialCode 4f81b9d835 Add some kernel network interfaces 2023-05-12 08:39:58 +08:00
BeneficialCode 44190691fb Check the offset value 2023-04-26 09:42:21 +08:00
BeneficialCode 01d9f40c7e Update the docs and fixup the x86 compile error 2023-04-24 19:30:11 +08:00
BeneficialCode f70c80ccb1 Tweak a hug bug 2023-04-02 20:59:59 +08:00
BeneficialCode d17d899cab Modified the DbgSys routines's name 2023-04-02 18:16:03 +08:00
BeneficialCode f0d94ab648 Complete the DbgSys symbol init and hook DbgSys 2023-03-31 18:33:31 +08:00
BeneficialCode 114dc79729 Complete most of the DbgSys function 2023-03-30 22:49:13 +08:00
BeneficialCode f072cc5fb9 Update the DbgSys code 2023-03-30 19:47:45 +08:00
BeneficialCode b58d4cf807 Update the DbgSys 2023-03-29 22:46:53 +08:00
BeneficialCode 0b31dae22e Update code 2023-03-29 00:16:23 +08:00
BeneficialCode 5980c4e6b7 Support dump the windows extension table function 2023-03-06 22:56:13 +08:00
BeneficialCode 1cc419417f Support the WinExtHosts view 2023-03-06 17:34:31 +08:00
BeneficialCode 20e7833fdf Complete the kernel eat hook detect 2023-03-02 23:45:17 +08:00
BeneficialCode 72ecf6abc9 Support Kernel EAT hook scan 2023-03-02 18:34:12 +08:00
BeneficialCode 74db61eb39 Update the DbgkCreateThread 2023-02-25 20:47:55 +08:00
BeneficialCode cf6cb13f49 Update DbgkCreateThread function 2023-02-25 08:52:13 +08:00
BeneficialCode b08717faab update the DbgkpPostFakeThreadMessages 2023-02-23 22:58:06 +08:00
BeneficialCode 341d748c7c Add some comments 2023-02-23 14:52:02 +08:00
BeneficialCode 47d0b29c97 Complete the DbgkpQueueMessage 2023-02-22 23:43:38 +08:00
BeneficialCode 69381d065b tweak some bugs in File Mini Filter 2023-02-22 11:00:47 +08:00
CORP\zengquan efddbbb52c Fixup the sys dump blue screen bug check 2023-02-18 14:35:45 +08:00
CORP\zengquan c5d6070595 Tweak some warnings. 2023-02-06 10:18:27 +08:00
BeneficialCode 60ee70445c Add the driver module dump interface. But it still has memory access violation. 2023-01-08 21:37:56 +08:00
BeneficialCode 543eedcc76 tweak the prevent delete policy bug 2023-01-08 13:23:49 +08:00
BeneficialCode 3a7a8b9cc0 Add the EPROCESS info in process list 2023-01-08 09:11:18 +08:00
BeneficialCode 996e7a6f6e upload some png 2022-12-21 10:01:27 +08:00
BeneficialCode abe307ae5f Can get the count of vad 2022-12-11 11:34:27 +08:00
BeneficialCode 34d3c85cfb Tweak some merage syntax errors 2022-12-06 20:07:10 +08:00
BeneficialCode c608a3349c Merge 2022-12-06 19:58:28 +08:00
BeneficialCode a535c36ac4 Merge the code 2022-12-06 19:54:59 +08:00
CORP\zengquan ce2c4c8f6f Merge 2022-12-06 19:17:47 +08:00
CORP\zengquan 37450dbe93 Update the code from work computer 2022-12-06 19:13:18 +08:00
BeneficialCode ed60689141 Complete the DbgkpPostModuleMessages routine 2022-11-27 18:01:05 +08:00
BeneficialCode d4de2b40b7 Tweak some compile errors 2022-11-27 15:07:19 +08:00
BeneficialCode 34ea5246cc Remove the struct define location 2022-11-26 13:35:38 +08:00
BeneficialCode f7e8ddb966 Add go to the kernel module file location 2022-11-26 13:33:42 +08:00
BeneficialCode e10e3556db Implemented the NtDebugActiveProcess 2022-11-25 09:30:16 +08:00
BeneficialCode 816bbdd336 Add the DbgkpPostFakeProcessCreateMessages routine implemention 2022-11-15 08:32:58 +08:00
BeneficialCode 289d6243be Add the NtDebugActiveProcess function to DbgSys 2022-11-06 23:30:26 +08:00