BeneficialCode
|
996e7a6f6e
|
upload some png
|
2022-12-21 10:01:27 +08:00 |
|
BeneficialCode
|
abe307ae5f
|
Can get the count of vad
|
2022-12-11 11:34:27 +08:00 |
|
BeneficialCode
|
34d3c85cfb
|
Tweak some merage syntax errors
|
2022-12-06 20:07:10 +08:00 |
|
BeneficialCode
|
c608a3349c
|
Merge
|
2022-12-06 19:58:28 +08:00 |
|
BeneficialCode
|
a535c36ac4
|
Merge the code
|
2022-12-06 19:54:59 +08:00 |
|
CORP\zengquan
|
ce2c4c8f6f
|
Merge
|
2022-12-06 19:17:47 +08:00 |
|
CORP\zengquan
|
37450dbe93
|
Update the code from work computer
|
2022-12-06 19:13:18 +08:00 |
|
BeneficialCode
|
ed60689141
|
Complete the DbgkpPostModuleMessages routine
|
2022-11-27 18:01:05 +08:00 |
|
BeneficialCode
|
d4de2b40b7
|
Tweak some compile errors
|
2022-11-27 15:07:19 +08:00 |
|
BeneficialCode
|
34ea5246cc
|
Remove the struct define location
|
2022-11-26 13:35:38 +08:00 |
|
BeneficialCode
|
f7e8ddb966
|
Add go to the kernel module file location
|
2022-11-26 13:33:42 +08:00 |
|
BeneficialCode
|
e10e3556db
|
Implemented the NtDebugActiveProcess
|
2022-11-25 09:30:16 +08:00 |
|
BeneficialCode
|
816bbdd336
|
Add the DbgkpPostFakeProcessCreateMessages routine implemention
|
2022-11-15 08:32:58 +08:00 |
|
BeneficialCode
|
289d6243be
|
Add the NtDebugActiveProcess function to DbgSys
|
2022-11-06 23:30:26 +08:00 |
|
BeneficialCode
|
b194029515
|
Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit
|
2022-11-06 16:53:45 +08:00 |
|
BeneficialCode
|
9f6f503108
|
Update the kernel inject code
|
2022-11-06 16:53:36 +08:00 |
|
CORP\zengquan
|
915640859a
|
improve the iat hook scan method
|
2022-11-05 19:47:02 +08:00 |
|
CORP\zengquan
|
7fed05cdfc
|
Fixup the Minifilter callback remove bug
|
2022-09-30 12:35:39 +08:00 |
|
CORP\zengquan
|
c95e4e0727
|
Support remove the Minifilter callback
|
2022-09-29 16:05:44 +08:00 |
|
CORP\zengquan
|
6481124870
|
Bypass the vmp3.6 kernel debugger dectect.
|
2022-09-22 15:58:16 +08:00 |
|
CORP\zengquan
|
be83f5b1aa
|
Fixup a symbol pdb download error.
|
2022-09-08 13:32:54 +08:00 |
|
CORP\zengquan
|
0a702f8899
|
Add the MiniFilter callback enum
|
2022-09-07 19:54:43 +08:00 |
|
CORP\zengquan
|
f185b9975c
|
Add the MiniFilter UI
|
2022-09-06 19:49:41 +08:00 |
|
BeneficialCode
|
b705e5ab2f
|
Add some kernel inject dll code
|
2022-09-05 08:38:10 +08:00 |
|
CORP\zengquan
|
fc2c0caaa4
|
Fixup the x86 code bug
|
2022-08-29 11:47:47 +08:00 |
|
BeneficialCode
|
abb87b6c30
|
Add some enum io timer bug code
|
2022-08-28 22:36:07 +08:00 |
|
BeneficialCode
|
3cc29057ad
|
Fixup the x86 code bug!
|
2022-08-28 17:35:29 +08:00 |
|
CORP\zengquan
|
4ec12bb76c
|
Add some x86 code bug in DPC Timer traverse
|
2022-08-28 14:38:41 +08:00 |
|
CORP\zengquan
|
4a1052d569
|
Support enum the kernel timer (DPC)
|
2022-08-28 14:01:47 +08:00 |
|
CORP\zengquan
|
303569e737
|
Add the enum kernel timer object
|
2022-08-27 19:28:07 +08:00 |
|
CORP\zengquan
|
e85218297a
|
Fixup the system notify remove method bug
|
2022-08-26 15:22:05 +08:00 |
|
CORP\zengquan
|
16458951ad
|
Support erase PreObOperation
|
2022-08-25 18:46:24 +08:00 |
|
CORP\zengquan
|
3628584f52
|
Add some anti-kernel debug bypass code
|
2022-08-23 18:05:18 +08:00 |
|
CORP\zengquan
|
868856590e
|
bug fix!
|
2022-08-22 18:35:11 +08:00 |
|
CORP\zengquan
|
5e4e982e7f
|
Added ObjectCallback bypass
|
2022-08-22 18:32:02 +08:00 |
|
BeneficialCode
|
f0259a4a95
|
Add the detours kernel inline hook engine
|
2022-08-21 10:37:41 +08:00 |
|
CORP\zengquan
|
1e29867146
|
add the detour lib
|
2022-08-19 18:22:42 +08:00 |
|
CORP\zengquan
|
54de773767
|
tweak a compile error on x86
|
2022-08-19 13:59:08 +08:00 |
|
CORP\zengquan
|
2815ad142e
|
Support the kernel pool tag enum
|
2022-08-19 11:16:05 +08:00 |
|
BeneficialCode
|
68f790d1af
|
Add the detour to the lib
|
2022-08-16 22:01:15 +08:00 |
|
CORP\zengquan
|
ec2b4a06ac
|
Fixup the object callback remove bug
|
2022-08-16 19:18:53 +08:00 |
|
CORP\zengquan
|
58ca578588
|
Add some theme settings
|
2022-08-15 09:17:05 +08:00 |
|
BeneficialCode
|
1996c847f9
|
Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit
|
2022-08-10 19:20:41 +08:00 |
|
BeneficialCode
|
a0e188510e
|
Add the teb struct
|
2022-08-10 19:20:27 +08:00 |
|
CORP\zengquan
|
0e2b9e4416
|
fixup the ExReferenceCallBackBlock's bug
|
2022-08-09 14:15:15 +08:00 |
|
BeneficialCode
|
36257b2f2a
|
Fixup the symbol get method bugs
|
2022-08-06 20:30:50 +08:00 |
|
BeneficialCode
|
2c0164f989
|
display the system info
|
2022-08-06 11:59:35 +08:00 |
|
BeneficialCode
|
98ba5ecef5
|
Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit
|
2022-07-02 11:54:30 +08:00 |
|
BeneficialCode
|
2f01d42f58
|
Add the EvenTrace to the WinSysCore
|
2022-06-26 21:17:29 +08:00 |
|
CORP\zengquan
|
5fcc7b8dae
|
Add the log to the ImageNotify
|
2022-06-22 09:51:33 +08:00 |
|