GithubStar/WinArk
1
0
Fork 0
mirror of https://github.com/BeneficialCode/WinArk.git synced 2026-10-18 05:36:10 +08:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 1f0377f8bf Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit CORP\zengquan 2022-06-07 09:49:41 +08:00
  • ecab041f23 解决冲突 CORP\zengquan 2022-06-07 09:49:25 +08:00
  • d59f744cdc Fixup the registry callback enum bug BeneficialCode 2022-06-04 01:49:00 +08:00
  • 7c5de3c900 Get Registry Notify Count by CmpCallbackCount CORP\zengquan 2022-06-03 20:06:07 +08:00
  • 4a78703ea8 Add the registry callback enum CORP\zengquan 2022-06-03 17:35:24 +08:00
  • 52636b74e3 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit CORP\zengquan 2022-05-30 14:44:38 +08:00
  • f083aeed62 fixup the current dir function error CORP\zengquan 2022-05-30 14:44:28 +08:00
  • 781d50890a Fixup the Process PreOperation remove blue bug BeneficialCode 2022-05-13 22:17:52 +08:00
  • 3992d3d939 Fixup the icon. Release the first public version. CORP\zengquan 2022-05-01 13:17:22 +08:00
  • 13590ca065 tweak a bug CORP\zengquan 2022-04-27 18:06:41 +08:00
  • 7f6b32201e Add the module bit analysis CORP\zengquan 2022-04-27 18:04:17 +08:00
  • f710715e81 1. Add the remove notify function 2. Fixup the PAGE_FAULT_IN_NONPAGED_AREA BeneficialCode 2022-04-23 22:31:52 +08:00
  • 2bce289568 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit BeneficialCode 2022-04-12 10:02:55 +08:00
  • 5c6f68761e Fixup the KernelLibrary compiler error BeneficialCode 2022-04-12 10:02:37 +08:00
  • 34e5226c27 support regular register path CORP\zengquan 2022-03-24 16:30:55 +08:00
  • 1d2d6c8fb0 Add the sort of network table CORP\zengquan 2022-02-28 09:21:46 +08:00
  • 8968b2ee5f Add the intercept the driver load and backup it BeneficialCode 2022-02-20 11:55:44 +08:00
  • 71d0d43c0a Add the backup file part1 CORP\zengquan 2022-02-18 18:47:28 +08:00
  • 64da2a4102 Add the dangerous process display CORP\zengquan 2022-02-18 15:18:08 +08:00
  • 4bab0da680 support get the process cmd line on Windows 7 CORP\zengquan 2022-02-18 11:18:56 +08:00
  • 9eaa534b7e Add the driver object dispatch routine lookup CORP\zengquan 2022-02-16 19:54:02 +08:00
  • 10a3378eba fixup the system service table address method error CORP\zengquan 2022-02-15 16:02:08 +08:00
  • 791296339f added debug object decode mask CORP\zengquan 2022-02-15 13:24:31 +08:00
  • ec8fffe671 Add the LookasideList and ExecutiveResource CORP\zengquan 2022-01-24 17:11:29 +08:00
  • 746338e358 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit BeneficialCode 2022-01-22 12:03:52 +08:00
  • dd24dfd0dd Add some function pointer BeneficialCode 2022-01-22 12:00:11 +08:00
  • 08c30c1765 Update the memory manage CORP\zengquan 2022-01-13 18:32:19 +08:00
  • 87f2f6c74e Update the loadlibrary way CORP\zengquan 2022-01-13 14:26:02 +08:00
  • 7614a47e6c Avoid module hijack BeneficialCode 2022-01-11 23:23:15 +08:00
  • 8207fb71b1 More robust BeneficialCode 2022-01-11 20:27:22 +08:00
  • cb748224f5 Add the len judgement BeneficialCode 2022-01-11 19:48:26 +08:00
  • 37b2ac2063 Add the manifest xml file BeneficialCode 2022-01-09 15:25:01 +08:00
  • 3735d0e01b Fixup the chinese lauage convert error CORP\zengquan 2022-01-05 17:04:02 +08:00
  • 7b392889cf Unknow bug BeneficialCode 2022-01-04 21:29:31 +08:00
  • 8f0d78e1a2 Fixup the PiddbCacheData size BeneficialCode 2022-01-04 20:35:14 +08:00
  • e9cd4375e7 Fixup system notify enum error CORP\zengquan 2022-01-04 18:21:19 +08:00
  • f2b663b6c3 Add some Dbg System Routine BeneficialCode 2022-01-04 08:46:57 +08:00
  • b3451b3fd1 Add the ObCallback Routine Dispaly BeneficialCode 2022-01-02 20:54:51 +08:00
  • 79cd254a5e Fixup the ssdt table display BeneficialCode 2022-01-02 11:16:00 +08:00
  • b70538e10c fixup the table field BeneficialCode 2022-01-01 22:01:50 +08:00
  • 5b2ec478c4 Add the PiDDBCacheTable and UnloadedDrivers Information Display BeneficialCode 2022-01-01 15:47:39 +08:00
  • c425897cbe Build one struct that user mode can consume. Add the APC region. CORP\zengquan 2021-12-31 18:31:06 +08:00
  • 02d991e8da a structure for user-mode BeneficialCode 2021-12-30 22:35:16 +08:00
  • bdf62b0f20 Add the loaded and unloaded driver in the sys module CORP\zengquan 2021-12-30 17:32:19 +08:00
  • 75f358c675 Add the log mechanism CORP\zengquan 2021-12-25 14:07:16 +08:00
  • d067f44753 change the way to grab the ssdt CORP\zengquan 2021-12-25 10:58:04 +08:00
  • 6789a54cf4 Add Thread Notify CORP\zengquan 2021-11-29 10:46:20 +08:00
  • 646dc22075 Updated code CORP\zengquan 2021-11-27 14:02:10 +08:00
  • 7ecacd5749 fixup the symbol parser load pdb file error. The dllSize cannot be zero. CORP\zengquan 2021-11-26 21:11:23 +08:00
  • e890ec8cb1 Add some kernel module infomation display CORP\zengquan 2021-11-26 10:48:50 +08:00
  • 9accdcec6e support the symbol fixup when system has updated CORP\zengquan 2021-11-26 10:15:14 +08:00
  • 3885ce3253 fixup the ssdt rva and windows focus on win7 CORP\zengquan 2021-11-25 15:15:34 +08:00
  • 85d736fe4c Add shadow ssdt function hook dected CORP\zengquan 2021-11-16 17:47:46 +08:00
  • e45bb192ac Delete some old source code CORP\zengquan 2021-11-14 12:27:47 +08:00
  • 69f727e8d1 Add symbol download CORP\zengquan 2021-11-03 11:03:43 +08:00
  • 883fc9e9bb Delete InstDrv CORP\zengquan 2021-10-29 17:03:13 +08:00
  • aeca6b12ff Add Service View CORP\zengquan 2021-10-29 17:00:58 +08:00
  • bcbccde1aa update registry module CORP\zengquan 2021-10-26 16:12:26 +08:00
  • 3ec54fde23 fixup the vscoll pos bug CORP\zengquan 2021-08-26 18:46:43 +08:00
  • 5aefde72dc Add well-known logon session id decode CORP\zengquan 2021-08-26 16:54:35 +08:00
  • f25809c374 fixup memory leak CORP\zengquan 2021-08-26 12:32:15 +08:00
  • fbf4fcc487 Add some code comment CORP\zengquan 2021-08-25 10:02:01 +08:00
  • 478d4d392d Add enum Windows function CORP\zengquan 2021-08-24 15:10:08 +08:00
  • e9684dc45c Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit BeneficialCode 2021-08-21 20:37:36 +08:00
  • 1b7dc2abeb Add some code BeneficialCode 2021-08-19 21:24:35 +08:00
  • cd18694db6 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit BeneficialCode 2021-08-19 21:24:35 +08:00
  • 1c9b62bb78 fix bug BeneficialCode 2021-05-30 12:20:23 +08:00
  • 43b637df12 Create README.md BeneficialCode 2021-08-14 09:22:08 +08:00
  • 92474293af 添加项目文件。 BeneficialCode 2021-05-26 21:47:17 +08:00
  • 8006278124 添加 .gitignore 和 .gitattributes。 BeneficialCode 2021-05-26 21:46:52 +08:00