78 Commits

Author SHA1 Message Date
BeneficialCode 996e7a6f6e upload some png 2022-12-21 10:01:27 +08:00
BeneficialCode abe307ae5f Can get the count of vad 2022-12-11 11:34:27 +08:00
BeneficialCode 34d3c85cfb Tweak some merage syntax errors 2022-12-06 20:07:10 +08:00
BeneficialCode c608a3349c Merge 2022-12-06 19:58:28 +08:00
BeneficialCode a535c36ac4 Merge the code 2022-12-06 19:54:59 +08:00
CORP\zengquan ce2c4c8f6f Merge 2022-12-06 19:17:47 +08:00
CORP\zengquan 37450dbe93 Update the code from work computer 2022-12-06 19:13:18 +08:00
BeneficialCode ed60689141 Complete the DbgkpPostModuleMessages routine 2022-11-27 18:01:05 +08:00
BeneficialCode d4de2b40b7 Tweak some compile errors 2022-11-27 15:07:19 +08:00
BeneficialCode 34ea5246cc Remove the struct define location 2022-11-26 13:35:38 +08:00
BeneficialCode f7e8ddb966 Add go to the kernel module file location 2022-11-26 13:33:42 +08:00
BeneficialCode e10e3556db Implemented the NtDebugActiveProcess 2022-11-25 09:30:16 +08:00
BeneficialCode 816bbdd336 Add the DbgkpPostFakeProcessCreateMessages routine implemention 2022-11-15 08:32:58 +08:00
BeneficialCode 289d6243be Add the NtDebugActiveProcess function to DbgSys 2022-11-06 23:30:26 +08:00
BeneficialCode b194029515 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit 2022-11-06 16:53:45 +08:00
BeneficialCode 9f6f503108 Update the kernel inject code 2022-11-06 16:53:36 +08:00
CORP\zengquan 915640859a improve the iat hook scan method 2022-11-05 19:47:02 +08:00
CORP\zengquan 7fed05cdfc Fixup the Minifilter callback remove bug 2022-09-30 12:35:39 +08:00
CORP\zengquan c95e4e0727 Support remove the Minifilter callback 2022-09-29 16:05:44 +08:00
CORP\zengquan 6481124870 Bypass the vmp3.6 kernel debugger dectect. 2022-09-22 15:58:16 +08:00
CORP\zengquan be83f5b1aa Fixup a symbol pdb download error. 2022-09-08 13:32:54 +08:00
CORP\zengquan 0a702f8899 Add the MiniFilter callback enum 2022-09-07 19:54:43 +08:00
CORP\zengquan f185b9975c Add the MiniFilter UI 2022-09-06 19:49:41 +08:00
BeneficialCode b705e5ab2f Add some kernel inject dll code 2022-09-05 08:38:10 +08:00
CORP\zengquan fc2c0caaa4 Fixup the x86 code bug 2022-08-29 11:47:47 +08:00
BeneficialCode abb87b6c30 Add some enum io timer bug code 2022-08-28 22:36:07 +08:00
BeneficialCode 3cc29057ad Fixup the x86 code bug! 2022-08-28 17:35:29 +08:00
CORP\zengquan 4ec12bb76c Add some x86 code bug in DPC Timer traverse 2022-08-28 14:38:41 +08:00
CORP\zengquan 4a1052d569 Support enum the kernel timer (DPC) 2022-08-28 14:01:47 +08:00
CORP\zengquan 303569e737 Add the enum kernel timer object 2022-08-27 19:28:07 +08:00
CORP\zengquan e85218297a Fixup the system notify remove method bug 2022-08-26 15:22:05 +08:00
CORP\zengquan 16458951ad Support erase PreObOperation 2022-08-25 18:46:24 +08:00
CORP\zengquan 3628584f52 Add some anti-kernel debug bypass code 2022-08-23 18:05:18 +08:00
CORP\zengquan 868856590e bug fix! 2022-08-22 18:35:11 +08:00
CORP\zengquan 5e4e982e7f Added ObjectCallback bypass 2022-08-22 18:32:02 +08:00
BeneficialCode f0259a4a95 Add the detours kernel inline hook engine 2022-08-21 10:37:41 +08:00
CORP\zengquan 1e29867146 add the detour lib 2022-08-19 18:22:42 +08:00
CORP\zengquan 54de773767 tweak a compile error on x86 2022-08-19 13:59:08 +08:00
CORP\zengquan 2815ad142e Support the kernel pool tag enum 2022-08-19 11:16:05 +08:00
BeneficialCode 68f790d1af Add the detour to the lib 2022-08-16 22:01:15 +08:00
CORP\zengquan ec2b4a06ac Fixup the object callback remove bug 2022-08-16 19:18:53 +08:00
CORP\zengquan 58ca578588 Add some theme settings 2022-08-15 09:17:05 +08:00
BeneficialCode 1996c847f9 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit 2022-08-10 19:20:41 +08:00
BeneficialCode a0e188510e Add the teb struct 2022-08-10 19:20:27 +08:00
CORP\zengquan 0e2b9e4416 fixup the ExReferenceCallBackBlock's bug 2022-08-09 14:15:15 +08:00
BeneficialCode 36257b2f2a Fixup the symbol get method bugs 2022-08-06 20:30:50 +08:00
BeneficialCode 2c0164f989 display the system info 2022-08-06 11:59:35 +08:00
BeneficialCode 98ba5ecef5 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit 2022-07-02 11:54:30 +08:00
BeneficialCode 2f01d42f58 Add the EvenTrace to the WinSysCore 2022-06-26 21:17:29 +08:00
CORP\zengquan 5fcc7b8dae Add the log to the ImageNotify 2022-06-22 09:51:33 +08:00