GithubStar/WinArk
1
0
Fork 0
mirror of https://github.com/BeneficialCode/WinArk.git synced 2026-10-18 05:36:10 +08:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 41cfa78af9 Move the inline hook scan in the kernel module view. Beneficial 2023-11-17 09:38:26 +08:00
  • 276a7b3ac3 Merge branch 'master' of https://github.com/BeneficialCode/WinArk Beneficial 2023-11-13 15:00:01 +08:00
  • b1ee9269a4 Tweak the edit copy bug. Beneficial 2023-11-13 14:59:37 +08:00
  • 850c28de16 Tweak the hash table. BeneficialCode 2023-11-11 17:50:03 +08:00
  • 099be3ac7a Modified the test example. Beneficial 2023-11-11 13:53:35 +08:00
  • fab461ef31 Merge branch 'master' of https://github.com/BeneficialCode/WinArk BeneficialCode 2023-11-11 11:57:59 +08:00
  • 521a826f50 Modify the hash table. BeneficialCode 2023-11-11 11:57:47 +08:00
  • 0c8f915c26 Remove the dialog when downloading the pdb. Beneficial 2023-11-07 09:54:51 +08:00
  • 879ea8af97 Fixup the inline hook engine. BeneficialCode 2023-11-07 08:18:50 +08:00
  • c3fb51dfe1 Merge branch 'master' of https://github.com/BeneficialCode/WinArk BeneficialCode 2023-11-04 10:31:14 +08:00
  • dcfd2824ac Beautify the registry manager. BeneficialCode 2023-11-04 10:31:03 +08:00
  • 34b1278fb6 fixup the detours library. zengquan 2023-11-02 17:30:22 +08:00
  • 03a74ccef2 Implemented the reflector function. BeneficialCode 2023-11-01 07:54:15 +08:00
  • 85e3af80ed Changed the Sym Options. BeneficialCode 2023-10-30 16:36:49 +08:00
  • f203a58563 To avoid unexpected behavior or memory corruption. BeneficialCode 2023-10-30 16:13:29 +08:00
  • 2db014589d Delete the sdv BeneficialCode 2023-10-29 19:54:11 +08:00
  • 5b599e243d Analyze the code. BeneficialCode 2023-10-29 13:47:46 +08:00
  • 9a2eb98921 Support restore the x64hooktype4 inline hook. BeneficialCode 2023-10-26 18:19:31 +08:00
  • 51db016fca Reduced the false x64 inline hook results. BeneficialCode 2023-10-15 14:58:31 +08:00
  • 1b677c8d7c Add more checks on inline hook scan. BeneficialCode 2023-10-13 16:09:11 +08:00
  • 0800ec4378 Add routine offset. BeneficialCode 2023-10-12 16:33:23 +08:00
  • 2f4b15a446 Add the object callback view. BeneficialCode 2023-10-12 16:12:03 +08:00
  • 39d0cec4eb tweak a filed name in OB_CALLBACK_ENTRY. BeneficialCode 2023-10-09 18:38:44 +08:00
  • fb97c37688 Modified the comments. BeneficialCode 2023-10-09 18:15:25 +08:00
  • 26d487ebbc Add the Hash Table. BeneficialCode 2023-09-28 17:44:33 +08:00
  • 8a653dd351 Add the misc view window. BeneficialCode 2023-09-27 11:01:59 +08:00
  • 8e39b69eb1 Add the 涡苏 to list. BeneficialCode 2023-09-20 18:01:08 +08:00
  • e5f090dbec Fixup the memory overload. BeneficialCode 2023-09-20 17:44:09 +08:00
  • b66eb3f21e Optimize the inline hook scan. BeneficialCode 2023-09-20 16:20:33 +08:00
  • 24795b0faf Delete the symbol when download the specific pdb failed. BeneficialCode 2023-09-19 16:36:48 +08:00
  • 574f573509 Tweak the pdb download error. BeneficialCode 2023-09-18 13:50:19 +08:00
  • 9b053157a8 Fixup the remove process notify function logic error. BeneficialCode 2023-09-11 14:11:30 +08:00
  • 997a4c3403 fixup the error access memory BeneficialCode 2023-09-09 20:04:42 +08:00
  • 1e7f39346f Don't verify the ssl cert. BeneficialCode 2023-09-09 14:29:36 +08:00
  • 777ed451a1 fixup the %wZ format faltal error. BeneficialCode 2023-09-08 15:36:53 +08:00
  • e3234260e9 Fixup the ssdt & shadow ssdt rva on x86 system. BeneficialCode 2023-09-07 18:35:27 +08:00
  • d08133d0d1 Drop the Microsoft Windows Internet Extensions and use the poco library for downloading pdb. BeneficialCode 2023-09-07 14:29:05 +08:00
  • 8f1de2c958 Enhance the kernel inline hook scan. BeneficialCode 2023-09-04 10:03:11 +08:00
  • 8cf15c6dea Update the inline hook scan. BeneficialCode 2023-09-01 18:33:57 +08:00
  • 7a124faad4 fixup the compile error on x86. BeneficialCode 2023-08-30 17:31:16 +08:00
  • 1021468671 Support for sorting handle's name. BeneficialCode 2023-08-27 21:01:57 +08:00
  • 766f0e6485 Update the hook function. BeneficialCode 2023-08-27 00:00:18 +08:00
  • 1303165afc Get the PI_MinCryptHashSearchCompare symbol address BeneficialCode 2023-08-24 08:44:42 +08:00
  • ed7ff58404 Hook hash search function. BeneficialCode 2023-08-24 08:43:30 +08:00
  • fa396262d6 Disable driver load by hook. BeneficialCode 2023-08-23 22:48:44 +08:00
  • c0a276cc44 Add the Windows task scheduler view. BeneficialCode 2023-08-21 16:40:56 +08:00
  • ab6d13552b Enhance the explorer view. BeneficialCode 2023-08-10 14:59:46 +08:00
  • e29d0ed39a Get path from ID List. BeneficialCode 2023-08-09 18:32:32 +08:00
  • 89e2621fb4 Modify the pdb check condition to accelerate the app startup. BeneficialCode 2023-08-08 11:28:16 +08:00
  • 51d472b7e1 Support export service name by Pid. BeneficialCode 2023-08-04 17:02:11 +08:00
  • 9cb6c297a1 On Windows 11, the SystemSessionPoolTagInformation is not a valid information class for the specified object. BeneficialCode 2023-08-04 15:15:11 +08:00
  • 257d5acb83 Enhance the pointer check BeneficialCode 2023-08-03 17:33:30 +08:00
  • 00dc5df8fb Add the lsa protection configuration registry BeneficialCode 2023-08-03 14:19:56 +08:00
  • 28bd506fa7 Add the known dlls to locations BeneficialCode 2023-08-03 09:26:06 +08:00
  • 780530017e Change the token width BeneficialCode 2023-08-02 16:20:27 +08:00
  • a28cd1900d Support show the token privilege display name. BeneficialCode 2023-08-02 11:46:38 +08:00
  • 2bbbd47770 Add the system information BeneficialCode 2023-07-26 17:03:32 +08:00
  • 988ec01fd8 Merge pull request #4 from hemd/fix_duplicate_code BeneficialCode 2023-07-25 12:07:22 +08:00
  • 88041214e0 delete duplicate code PVOID 2023-07-25 11:24:46 +08:00
  • 9604bb1f91 update the WinArk doc BeneficialCode 2023-07-13 10:00:07 +08:00
  • d305ff75a3 Update the ReadME。 BeneficialCode 2023-07-13 09:59:20 +08:00
  • 7f6cb6ae9a Support export the REG_BINARY to bin file. BeneficialCode 2023-06-26 16:02:11 +08:00
  • 2efa28abfc Add the VulnerableDriverBlocklistEnable Registry Key to GoTo list BeneficialCode 2023-06-25 09:43:32 +08:00
  • 4365189265 Merge branch 'master' of https://github.com/BeneficialCode/WinArk BeneficialCode 2023-06-24 21:33:55 +08:00
  • b0ea32a671 Append the force delete menu, but not yet implemented! BeneficialCode 2023-06-24 21:33:45 +08:00
  • 8eeaeaf2dd tweak minor bug BeneficialCode 2023-06-21 15:35:53 +08:00
  • a0b1d531e5 The new kernel handler BeneficialCode 2023-06-21 15:24:39 +08:00
  • 0090d300ca Avoid some warnings. BeneficialCode 2023-06-19 18:18:26 +08:00
  • e993d516c9 Add the COM based explorer. BeneficialCode 2023-06-15 14:18:10 +08:00
  • 3a3648b859 Merge branch 'master' of https://github.com/BeneficialCode/WinArk BeneficialCode 2023-06-14 19:57:22 +08:00
  • b2c3b274f5 Add the Explorer view ui. BeneficialCode 2023-06-14 19:57:16 +08:00
  • 8c9b392543 Update build-winark.md BeneficialCode 2023-06-11 11:03:31 +08:00
  • 11ecd35c10 Merge branch 'master' of https://github.com/BeneficialCode/WinArk BeneficialCode 2023-06-10 13:47:16 +08:00
  • 0ee207df0b Show the boot mode BeneficialCode 2023-06-10 13:47:06 +08:00
  • 4382e85aec Update build-winark.md BeneficialCode 2023-06-10 13:27:59 +08:00
  • d1bb99cf5e Update build-winark.md BeneficialCode 2023-06-10 13:27:36 +08:00
  • 6cb57d7657 Update build-winark.md BeneficialCode 2023-06-10 13:27:17 +08:00
  • 8957217d63 Update build-winark.md BeneficialCode 2023-06-10 13:26:23 +08:00
  • 78d6bdbde6 update the zydis BeneficialCode 2023-06-10 08:12:27 +08:00
  • 82c67b66ac reset the zydis BeneficialCode 2023-06-10 08:06:14 +08:00
  • 6034ff2a7d Support the Russian Language. BeneficialCode 2023-06-04 12:04:35 +08:00
  • 3a10e5e2b2 clear the elements when refresh BeneficialCode 2023-06-01 09:18:44 +08:00
  • ab67a358fe Now it can detect the ntoskrnl inline hook BeneficialCode 2023-05-31 23:23:20 +08:00
  • 9b9b89afcd x64 inline hook detect first verison BeneficialCode 2023-05-31 23:22:43 +08:00
  • 220c2e22f9 Change the button text BeneficialCode 2023-05-31 16:18:51 +08:00
  • da3487e97f Add some kernel inline hook detect code. BeneficialCode 2023-05-30 15:21:09 +08:00
  • b02b1ab376 Add the proxy service to the goto key list BeneficialCode 2023-05-29 14:53:28 +08:00
  • cb3fbee703 fixup a fatal bug in khook. BeneficialCode 2023-05-28 21:39:46 +08:00
  • c218ca4695 Change the kdprint to LogInfo BeneficialCode 2023-05-26 17:31:46 +08:00
  • 7e110f3642 The dll can hook 7 functions by Minhook. BeneficialCode 2023-05-20 17:57:52 +08:00
  • be0fdf8c13 Pass the DbgEngine compile. BeneficialCode 2023-05-19 16:56:03 +08:00
  • d2a03a6ab3 Add Minhook library to the project. BeneficialCode 2023-05-19 16:55:25 +08:00
  • 4456ca136e fixup the version info BeneficialCode 2023-05-19 07:52:13 +08:00
  • 77db89d661 update the version info BeneficialCode 2023-05-19 07:28:15 +08:00
  • 48dc5ff02a remove the detour library BeneficialCode 2023-05-19 07:13:13 +08:00
  • 72b7ff1740 Merge branch 'master' of https://github.com/BeneficialCode/WinArk BeneficialCode 2023-05-18 14:35:40 +08:00
  • 27e835a469 when we cannot get the pdb size, we just return true. BeneficialCode 2023-05-18 14:35:28 +08:00
  • 5429b6fd74 Add user mode Dbg Engine dll BeneficialCode 2023-05-16 08:22:22 +08:00
  • a789366636 Support remove and add debugger into the ListView BeneficialCode 2023-05-14 22:44:29 +08:00
  • b5b7a983c8 Finish the ksocet tdi lib BeneficialCode 2023-05-14 11:44:04 +08:00