GithubStar/WinArk
1
0
Fork 0
mirror of https://github.com/BeneficialCode/WinArk.git synced 2026-10-18 13:41:03 +08:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 081ecbdbb1 Bug fixed (network byte order) CORP\zengquan 2022-10-18 11:08:39 +08:00
  • c4512616ce Tweak some minor bugs :-) CORP\zengquan 2022-10-12 13:58:40 +08:00
  • f83821f9c5 fixup the nullptr reference when collect WFP filters CORP\zengquan 2022-10-11 18:25:24 +08:00
  • 13b8eb086b Support enum the WFP filters CORP\zengquan 2022-10-11 17:59:05 +08:00
  • 7fed05cdfc Fixup the Minifilter callback remove bug CORP\zengquan 2022-09-30 12:35:39 +08:00
  • c95e4e0727 Support remove the Minifilter callback CORP\zengquan 2022-09-29 16:05:44 +08:00
  • 7374fe585d Add two registry paths CORP\zengquan 2022-09-23 15:53:58 +08:00
  • 6481124870 Bypass the vmp3.6 kernel debugger dectect. CORP\zengquan 2022-09-22 15:58:16 +08:00
  • 56945e5489 tweak a minor bug CORP\zengquan 2022-09-21 09:44:24 +08:00
  • a54b37c932 Run the WInArk under System account. CORP\zengquan 2022-09-20 18:21:18 +08:00
  • 0acb03657d Update the version informations CORP\zengquan 2022-09-09 16:36:31 +08:00
  • dc67c91090 Add some service control code CORP\zengquan 2022-09-09 16:30:03 +08:00
  • 89dae76fb6 Add notify icon CORP\zengquan 2022-09-09 11:18:25 +08:00
  • 521f8cebd5 Add the Logon Session View CORP\zengquan 2022-09-08 18:25:41 +08:00
  • 19ea5a361e Add more major code CORP\zengquan 2022-09-08 14:30:56 +08:00
  • e2a0ebb288 delete old refresh code CORP\zengquan 2022-09-08 13:58:06 +08:00
  • be83f5b1aa Fixup a symbol pdb download error. CORP\zengquan 2022-09-08 13:32:54 +08:00
  • 0a702f8899 Add the MiniFilter callback enum CORP\zengquan 2022-09-07 19:54:43 +08:00
  • f185b9975c Add the MiniFilter UI CORP\zengquan 2022-09-06 19:49:41 +08:00
  • b705e5ab2f Add some kernel inject dll code BeneficialCode 2022-09-05 08:38:10 +08:00
  • a18a017225 fixup the service name CORP\zengquan 2022-09-01 15:42:34 +08:00
  • 2f203cc7be Add some service control code CORP\zengquan 2022-09-01 10:14:03 +08:00
  • 06b630690b support goto the app paths key CORP\zengquan 2022-08-31 18:28:30 +08:00
  • 213e3f1a36 Add a winark service demo CORP\zengquan 2022-08-31 17:59:26 +08:00
  • 4e1b71880f tewak minor bug. CORP\zengquan 2022-08-31 15:48:27 +08:00
  • 03700a2785 support the sc and scm access decode CORP\zengquan 2022-08-31 09:59:42 +08:00
  • fc2c0caaa4 Fixup the x86 code bug CORP\zengquan 2022-08-29 11:47:47 +08:00
  • abb87b6c30 Add some enum io timer bug code BeneficialCode 2022-08-28 22:36:07 +08:00
  • 3cc29057ad Fixup the x86 code bug! BeneficialCode 2022-08-28 17:35:29 +08:00
  • 5118293be0 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit BeneficialCode 2022-08-28 16:47:07 +08:00
  • 208bf3b714 Update the version info BeneficialCode 2022-08-28 16:44:35 +08:00
  • 4ec12bb76c Add some x86 code bug in DPC Timer traverse CORP\zengquan 2022-08-28 14:38:41 +08:00
  • 4a1052d569 Support enum the kernel timer (DPC) CORP\zengquan 2022-08-28 14:01:47 +08:00
  • 303569e737 Add the enum kernel timer object CORP\zengquan 2022-08-27 19:28:07 +08:00
  • e85218297a Fixup the system notify remove method bug CORP\zengquan 2022-08-26 15:22:05 +08:00
  • 16458951ad Support erase PreObOperation CORP\zengquan 2022-08-25 18:46:24 +08:00
  • 2cf48d75c1 support sort the kernel notify by company name CORP\zengquan 2022-08-25 16:14:01 +08:00
  • 3f63d61ce6 Support sort the kernel module's company name CORP\zengquan 2022-08-25 16:02:44 +08:00
  • 6cecc4b414 fixup sort bug! BeneficialCode 2022-08-23 19:50:30 +08:00
  • 3628584f52 Add some anti-kernel debug bypass code CORP\zengquan 2022-08-23 18:05:18 +08:00
  • 0f837c5377 Support big pool information CORP\zengquan 2022-08-23 16:02:53 +08:00
  • 89b9636642 support find piddbcache by text BeneficialCode 2022-08-22 22:58:41 +08:00
  • 868856590e bug fix! CORP\zengquan 2022-08-22 18:35:11 +08:00
  • 5e4e982e7f Added ObjectCallback bypass CORP\zengquan 2022-08-22 18:32:02 +08:00
  • 7cea7f6a64 fixup the etw toolbar update bug CORP\zengquan 2022-08-22 18:00:52 +08:00
  • 4e611829f9 Support find the pool tag by text CORP\zengquan 2022-08-22 17:37:57 +08:00
  • 80881a7241 Support the piddbcache sort by driver name CORP\zengquan 2022-08-21 19:25:40 +08:00
  • f0259a4a95 Add the detours kernel inline hook engine BeneficialCode 2022-08-21 10:37:41 +08:00
  • 1e29867146 add the detour lib CORP\zengquan 2022-08-19 18:22:42 +08:00
  • 54de773767 tweak a compile error on x86 CORP\zengquan 2022-08-19 13:59:08 +08:00
  • 2815ad142e Support the kernel pool tag enum CORP\zengquan 2022-08-19 11:16:05 +08:00
  • 68f790d1af Add the detour to the lib BeneficialCode 2022-08-16 22:01:15 +08:00
  • ec2b4a06ac Fixup the object callback remove bug CORP\zengquan 2022-08-16 19:18:53 +08:00
  • f0dc0f78ce Support the ini and reg configurations CORP\zengquan 2022-08-16 10:43:28 +08:00
  • d6a565f6d4 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit CORP\zengquan 2022-08-15 09:17:14 +08:00
  • 58ca578588 Add some theme settings CORP\zengquan 2022-08-15 09:17:05 +08:00
  • b8e2cec87c Support set the opacity BeneficialCode 2022-08-15 08:39:47 +08:00
  • 8fbaed7af0 Add the Font configuration dialog BeneficialCode 2022-08-13 23:00:27 +08:00
  • 506ee10d2d Add the memory block dump CORP\zengquan 2022-08-12 17:15:23 +08:00
  • 9ece79987f Support copy/export inline hook info CORP\zengquan 2022-08-12 16:13:11 +08:00
  • b2ee7a2e03 Support the x86 inline hook scan CORP\zengquan 2022-08-12 10:34:51 +08:00
  • 94370fe332 Update the memory size format CORP\zengquan 2022-08-11 15:29:08 +08:00
  • 416f38ee64 Add the x64 inline hook scan CORP\zengquan 2022-08-11 11:21:25 +08:00
  • 56c93c85ea tweak the suspicious bug when call SymGetSymFromName CORP\zengquan 2022-08-11 10:26:44 +08:00
  • e1659d5589 Update the symbol handler BeneficialCode 2022-08-10 22:03:14 +08:00
  • 1996c847f9 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit BeneficialCode 2022-08-10 19:20:41 +08:00
  • a0e188510e Add the teb struct BeneficialCode 2022-08-10 19:20:27 +08:00
  • 9f86b7f0df Add the release bug :) CORP\zengquan 2022-08-10 18:41:34 +08:00
  • 36a29ec236 Add the disassembly library CORP\zengquan 2022-08-09 18:49:15 +08:00
  • 0e2b9e4416 fixup the ExReferenceCallBackBlock's bug CORP\zengquan 2022-08-09 14:15:15 +08:00
  • 6cbdeb88e8 Only support single instance. BeneficialCode 2022-08-07 17:59:04 +08:00
  • 36257b2f2a Fixup the symbol get method bugs BeneficialCode 2022-08-06 20:30:50 +08:00
  • c9753b8acf tweak minor error BeneficialCode 2022-08-06 13:19:26 +08:00
  • b2cd4056d3 Delete the Config Window close handle function BeneficialCode 2022-08-06 13:17:00 +08:00
  • f5ea93ff3d modified the control id BeneficialCode 2022-08-06 12:12:36 +08:00
  • f727636b9e resolve the resource.h conflict BeneficialCode 2022-08-06 12:03:47 +08:00
  • 2c0164f989 display the system info BeneficialCode 2022-08-06 11:59:35 +08:00
  • 55f6c30731 support the HLCU、HKLM etc. in the search edit bar. CORP\zengquan 2022-07-29 16:01:06 +08:00
  • d81ea49b97 support go to usually used register key CORP\zengquan 2022-07-29 14:47:49 +08:00
  • 165f3d0ecf Delete some menus CORP\zengquan 2022-07-25 15:37:20 +08:00
  • 6e07f974f3 Delete the message map 1 CORP\zengquan 2022-07-22 15:59:08 +08:00
  • 2725066cfa Clean the pdb files If the symbol pdb initailize failed. CORP\zengquan 2022-07-22 14:16:07 +08:00
  • 070c25dc72 Add the symbol download rubustness CORP\zengquan 2022-07-22 14:07:23 +08:00
  • 0513149419 fixup the symbol download check bug CORP\zengquan 2022-07-22 11:19:54 +08:00
  • c04d24192f Update README.md BeneficialCode 2022-07-10 17:35:44 +08:00
  • 679d6db72a Add the build event BeneficialCode 2022-07-10 17:33:48 +08:00
  • dbc9c8d301 Optimize the driver resource BeneficialCode 2022-07-10 14:11:15 +08:00
  • d6714a8628 Update the etw view BeneficialCode 2022-07-08 02:18:00 +08:00
  • 39c48a8171 Add the event and filter configuration dialog BeneficialCode 2022-07-03 22:41:17 +08:00
  • 98ba5ecef5 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit BeneficialCode 2022-07-02 11:54:30 +08:00
  • a21e2cb130 Add the Event Trace View BeneficialCode 2022-07-02 09:47:01 +08:00
  • 2f01d42f58 Add the EvenTrace to the WinSysCore BeneficialCode 2022-06-26 21:17:29 +08:00
  • 64b21dda29 Add the process access mask doc hyperlink CORP\zengquan 2022-06-23 10:25:02 +08:00
  • 3e363aba60 Not support in safe mode CORP\zengquan 2022-06-22 10:20:36 +08:00
  • 5fcc7b8dae Add the log to the ImageNotify CORP\zengquan 2022-06-22 09:51:33 +08:00
  • 05379ad770 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit CORP\zengquan 2022-06-14 13:25:34 +08:00
  • bd31015973 Add the PiDDBCacheTable, UnloadDriverTable and ProcessThreadTable export. BeneficialCode 2022-06-09 13:40:03 +08:00
  • 472889cbb4 1.Add the thread's own module 2.Add PiDDBCache、UnloadedDriver and Threads copy on right menu 3.fix the driver backup path in WinArk runtime path BeneficialCode 2022-06-08 22:31:19 +08:00
  • a30d58c897 Add the GetUserModuleByAddress and enhance the process module tracker BeneficialCode 2022-06-07 22:47:07 +08:00
  • 42d24c5e1b Fixup the memory view code bug. Makes code more robust. BeneficialCode 2022-06-07 21:32:06 +08:00