GithubStar/WinArk
1
0
Fork 0
mirror of https://github.com/BeneficialCode/WinArk.git synced 2026-10-17 04:40:35 +08:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 9e295a3408 Add ksocket function to the lib. BeneficialCode 2023-05-12 20:56:12 +08:00
  • 4f81b9d835 Add some kernel network interfaces BeneficialCode 2023-05-12 08:39:58 +08:00
  • 82abf87e86 Translate the chinese word into english BeneficialCode 2023-05-11 17:34:16 +08:00
  • 3168d7e47b Unload the driver when WinArk exit. BeneficialCode 2023-05-09 08:07:56 +08:00
  • 116235569c Fixup the fatal error in symbol check BeneficialCode 2023-04-26 10:40:57 +08:00
  • a291229aa5 Update the driver version BeneficialCode 2023-04-26 10:12:54 +08:00
  • 44190691fb Check the offset value BeneficialCode 2023-04-26 09:42:21 +08:00
  • 6c19014ebe Add more verify to the pdb BeneficialCode 2023-04-25 14:07:16 +08:00
  • 45734b5208 Replace some Chinese with English BeneficialCode 2023-04-25 13:39:39 +08:00
  • d11fb07b8b Internatinalize the tab ctrl's column names BeneficialCode 2023-04-25 13:29:05 +08:00
  • 2798af8612 Internationalize the WinArk BeneficialCode 2023-04-25 13:26:25 +08:00
  • 04592fca9c Update README.md BeneficialCode 2023-04-25 10:35:46 +08:00
  • c3689f7f5a Sort the process modules BeneficialCode 2023-04-24 22:57:49 +08:00
  • aee33faf08 Delete the Chinese lanuage in the readme BeneficialCode 2023-04-24 19:37:58 +08:00
  • 716b631454 Add titles for every test environments BeneficialCode 2023-04-24 19:34:08 +08:00
  • 01d9f40c7e Update the docs and fixup the x86 compile error BeneficialCode 2023-04-24 19:30:11 +08:00
  • b0bbc8c631 Add the Driver's LoadOrderGroup BeneficialCode 2023-04-07 18:32:49 +08:00
  • f70c80ccb1 Tweak a hug bug BeneficialCode 2023-04-02 20:59:59 +08:00
  • d17d899cab Modified the DbgSys routines's name BeneficialCode 2023-04-02 18:16:03 +08:00
  • f0d94ab648 Complete the DbgSys symbol init and hook DbgSys BeneficialCode 2023-03-31 18:33:31 +08:00
  • 114dc79729 Complete most of the DbgSys function BeneficialCode 2023-03-30 22:49:13 +08:00
  • f072cc5fb9 Update the DbgSys code BeneficialCode 2023-03-30 19:47:45 +08:00
  • b58d4cf807 Update the DbgSys BeneficialCode 2023-03-29 22:46:53 +08:00
  • 46b36593e7 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit BeneficialCode 2023-03-29 00:16:31 +08:00
  • 0b31dae22e Update code BeneficialCode 2023-03-29 00:16:23 +08:00
  • 0e77a1fda4 Update the DbgkMapViewOfSection BeneficialCode 2023-03-27 21:13:35 +08:00
  • 3a029b64c0 Tweak uninitialized local variable bug BeneficialCode 2023-03-27 11:20:25 +08:00
  • 45764abb81 we have to specify the architectures explicitly when install capstone by vcpkg BeneficialCode 2023-03-27 10:57:29 +08:00
  • 1996266d65 Init the eprocess variable BeneficialCode 2023-03-27 10:11:47 +08:00
  • 0ba0571cd7 Support view the host table symbol name BeneficialCode 2023-03-09 09:58:55 +08:00
  • 30940963bd Change the opacity value BeneficialCode 2023-03-07 10:32:19 +08:00
  • b2bb9d95e7 Change the service config by ChangeServiceConfig BeneficialCode 2023-03-07 10:09:08 +08:00
  • a7ce297ab4 Delete some unnecessary dialig resource BeneficialCode 2023-03-07 09:36:44 +08:00
  • 5980c4e6b7 Support dump the windows extension table function BeneficialCode 2023-03-06 22:56:13 +08:00
  • ed2d0c008d Fixup the bar name BeneficialCode 2023-03-06 18:36:24 +08:00
  • 8038818164 Beautify the ui BeneficialCode 2023-03-06 17:36:35 +08:00
  • b67784b21e Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit BeneficialCode 2023-03-06 17:34:50 +08:00
  • 1cc419417f Support the WinExtHosts view BeneficialCode 2023-03-06 17:34:31 +08:00
  • fe588ed32d Add Tab completion Reg Key BeneficialCode 2023-03-04 22:29:36 +08:00
  • 20e7833fdf Complete the kernel eat hook detect BeneficialCode 2023-03-02 23:45:17 +08:00
  • 72ecf6abc9 Support Kernel EAT hook scan BeneficialCode 2023-03-02 18:34:12 +08:00
  • d33cff4026 Add two process info fields BeneficialCode 2023-03-02 15:45:08 +08:00
  • c67f1312f2 Update the ScyllaDlg BeneficialCode 2023-02-26 09:48:45 +08:00
  • 74db61eb39 Update the DbgkCreateThread BeneficialCode 2023-02-25 20:47:55 +08:00
  • 3248415622 Update the Scylla BeneficialCode 2023-02-25 12:13:55 +08:00
  • cf6cb13f49 Update DbgkCreateThread function BeneficialCode 2023-02-25 08:52:13 +08:00
  • a13f3a03d1 Add remove kernel callback by Company Name BeneficialCode 2023-02-24 18:34:03 +08:00
  • b08717faab update the DbgkpPostFakeThreadMessages BeneficialCode 2023-02-23 22:58:06 +08:00
  • 341d748c7c Add some comments BeneficialCode 2023-02-23 14:52:02 +08:00
  • 47d0b29c97 Complete the DbgkpQueueMessage BeneficialCode 2023-02-22 23:43:38 +08:00
  • 69381d065b tweak some bugs in File Mini Filter BeneficialCode 2023-02-22 11:00:47 +08:00
  • b7c96e0860 Update the version cause the minifilter has some bugs BeneficialCode 2023-02-22 07:53:48 +08:00
  • fcbb3ed0b1 Delete some old useless code BeneficialCode 2023-02-21 20:56:38 +08:00
  • 7527526486 Add the zip new shell registry path BeneficialCode 2023-02-21 11:08:37 +08:00
  • b1d1d59ed6 Tweak memory leak CORP\zengquan 2023-02-20 09:35:25 +08:00
  • efddbbb52c Fixup the sys dump blue screen bug check CORP\zengquan 2023-02-18 14:35:45 +08:00
  • c5d6070595 Tweak some warnings. CORP\zengquan 2023-02-06 10:18:27 +08:00
  • 9a6dfce8ce Add some scylla code CORP\zengquan 2023-01-17 16:02:30 +08:00
  • fcb2f09d0d Add credits CORP\zengquan 2023-01-09 10:34:46 +08:00
  • 60ee70445c Add the driver module dump interface. But it still has memory access violation. BeneficialCode 2023-01-08 21:37:56 +08:00
  • 543eedcc76 tweak the prevent delete policy bug BeneficialCode 2023-01-08 13:23:49 +08:00
  • 3a7a8b9cc0 Add the EPROCESS info in process list BeneficialCode 2023-01-08 09:11:18 +08:00
  • 9630e09280 Support handle type sort BeneficialCode 2023-01-08 00:34:08 +08:00
  • fc0f045f09 Add Scylla Plugin Main UI Resource CORP\zengquan 2022-12-27 13:50:25 +08:00
  • 47b1e6723e Merge pull request #1 from BeneficialCode/add-license-1 v1.0.0 BeneficialCode 2022-12-21 11:15:34 +08:00
  • cf9f26a653 Create License BeneficialCode 2022-12-21 11:14:55 +08:00
  • 5a862582b3 Update README.md BeneficialCode 2022-12-21 10:07:10 +08:00
  • d3ff335324 Update README.md BeneficialCode 2022-12-21 10:04:50 +08:00
  • cc6de9b8ec Update README.md BeneficialCode 2022-12-21 10:03:12 +08:00
  • 996e7a6f6e upload some png BeneficialCode 2022-12-21 10:01:27 +08:00
  • abe307ae5f Can get the count of vad BeneficialCode 2022-12-11 11:34:27 +08:00
  • 6f4c01ae06 Delete the capstone dir CORP\zengquan 2022-12-07 09:40:06 +08:00
  • f84b4dd91f ApiSets NameLength on Windows 7 x86 equals 0. BeneficialCode 2022-12-06 22:35:52 +08:00
  • 34d3c85cfb Tweak some merage syntax errors BeneficialCode 2022-12-06 20:07:10 +08:00
  • c608a3349c Merge BeneficialCode 2022-12-06 19:58:28 +08:00
  • a535c36ac4 Merge the code BeneficialCode 2022-12-06 19:54:59 +08:00
  • ce2c4c8f6f Merge CORP\zengquan 2022-12-06 19:17:47 +08:00
  • 37450dbe93 Update the code from work computer CORP\zengquan 2022-12-06 19:13:18 +08:00
  • ed60689141 Complete the DbgkpPostModuleMessages routine BeneficialCode 2022-11-27 18:01:05 +08:00
  • d4de2b40b7 Tweak some compile errors BeneficialCode 2022-11-27 15:07:19 +08:00
  • 34ea5246cc Remove the struct define location BeneficialCode 2022-11-26 13:35:38 +08:00
  • f7e8ddb966 Add go to the kernel module file location BeneficialCode 2022-11-26 13:33:42 +08:00
  • e10e3556db Implemented the NtDebugActiveProcess BeneficialCode 2022-11-25 09:30:16 +08:00
  • 816bbdd336 Add the DbgkpPostFakeProcessCreateMessages routine implemention BeneficialCode 2022-11-15 08:32:58 +08:00
  • f787315b02 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit BeneficialCode 2022-11-12 21:05:15 +08:00
  • d5e0478a4b Add the session manager BeneficialCode 2022-11-12 21:04:54 +08:00
  • 4b9f1bec74 Update the altitude info CORP\zengquan 2022-11-07 14:44:32 +08:00
  • b1cf256b0c adjust the EAT hook scan method CORP\zengquan 2022-11-07 10:12:04 +08:00
  • 289d6243be Add the NtDebugActiveProcess function to DbgSys BeneficialCode 2022-11-06 23:30:26 +08:00
  • b194029515 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit BeneficialCode 2022-11-06 16:53:45 +08:00
  • 9f6f503108 Update the kernel inject code BeneficialCode 2022-11-06 16:53:36 +08:00
  • 915640859a improve the iat hook scan method CORP\zengquan 2022-11-05 19:47:02 +08:00
  • 3ace0b86de Update the EAT hook scan method CORP\zengquan 2022-11-04 18:04:24 +08:00
  • 64306c752e Add IAT hook scan CORP\zengquan 2022-11-03 18:31:08 +08:00
  • 4619ab228c Support scan the EAT hook CORP\zengquan 2022-11-02 18:31:22 +08:00
  • 1162423eaa Tweak exit minor bug CORP\zengquan 2022-11-01 17:14:41 +08:00
  • 9b8137e928 Modify the launch user CORP\zengquan 2022-11-01 17:04:25 +08:00
  • 19eacd2ea0 Add some kernel ntoskrnl thread routines symbol resolver CORP\zengquan 2022-10-31 16:15:11 +08:00
  • 550757ef42 Modify the driver start type CORP\zengquan 2022-10-25 17:43:49 +08:00
  • 0270b9f5a7 Fixed the ssdt service error finally CORP\zengquan 2022-10-18 17:13:28 +08:00