admin/BeneficialCode-WinArk
1
0
Fork 0
mirror of https://github.com/BeneficialCode/WinArk synced 2026-08-09 12:00:31 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
d1bb99cf5ec6dfd1e429fb49c7f7fec65ba83f2a
BeneficialCode-WinArk/KernelLibrary
T
History
BeneficialCode ab67a358fe Now it can detect the ntoskrnl inline hook
2023-05-31 23:23:20 +08:00
..
AutoEnter.cpp
Build one struct that user mode can consume.
2021-12-31 18:31:06 +08:00
AutoEnter.h
Build one struct that user mode can consume.
2021-12-31 18:31:06 +08:00
AutoLock.cpp
Delete some old source code
2021-11-14 12:27:47 +08:00
AutoLock.h
Add the LookasideList and ExecutiveResource
2022-01-24 17:11:29 +08:00
BypassAntiKernelDbg.cpp
Bypass the vmp3.6 kernel debugger dectect.
2022-09-22 15:58:16 +08:00
BypassAntiKernelDbg.h
Bypass the vmp3.6 kernel debugger dectect.
2022-09-22 15:58:16 +08:00
BypassObCallback.cpp
bug fix!
2022-08-22 18:35:11 +08:00
BypassObCallback.h
Added ObjectCallback bypass
2022-08-22 18:32:02 +08:00
code32.asm
Update the kernel inject code
2022-11-06 16:53:36 +08:00
code64.asm
Update the kernel inject code
2022-11-06 16:53:36 +08:00
Common.h
Add some kernel inline hook detect code.
2023-05-30 15:21:09 +08:00
CpuInfo.cpp
upload some png
2022-12-21 10:01:27 +08:00
CpuInfo.h
upload some png
2022-12-21 10:01:27 +08:00
CriticalRegion.cpp
Build one struct that user mode can consume.
2021-12-31 18:31:06 +08:00
CriticalRegion.h
Build one struct that user mode can consume.
2021-12-31 18:31:06 +08:00
CyclicBuffer.cpp
Delete some old source code
2021-11-14 12:27:47 +08:00
CyclicBuffer.h
Delete some old source code
2021-11-14 12:27:47 +08:00
DbgDefender.cpp
Delete some old source code
2021-11-14 12:27:47 +08:00
DbgDefender.h
Delete some old source code
2021-11-14 12:27:47 +08:00
detours.cpp
Tweak some warnings.
2023-02-06 10:18:27 +08:00
detours.h
Add the NtDebugActiveProcess function to DbgSys
2022-11-06 23:30:26 +08:00
DevMonManager.cpp
Delete some old source code
2021-11-14 12:27:47 +08:00
DevMonManager.h
Delete some old source code
2021-11-14 12:27:47 +08:00
disasm.cpp
Support the kernel pool tag enum
2022-08-19 11:16:05 +08:00
disasm.h
Support the kernel pool tag enum
2022-08-19 11:16:05 +08:00
ExecutiveResource.cpp
Update the code from work computer
2022-12-06 19:13:18 +08:00
ExecutiveResource.h
Update the code from work computer
2022-12-06 19:13:18 +08:00
FastMutex.cpp
Delete some old source code
2021-11-14 12:27:47 +08:00
FastMutex.h
Delete some old source code
2021-11-14 12:27:47 +08:00
FileManager.cpp
Add the intercept the driver load and backup it
2022-02-20 11:55:44 +08:00
FileManager.h
Add the intercept the driver load and backup it
2022-02-20 11:55:44 +08:00
FilterFileNameInformation.cpp
Update the code from work computer
2022-12-06 19:13:18 +08:00
FilterFileNameInformation.h
Update the code from work computer
2022-12-06 19:13:18 +08:00
GuardedRegion.cpp
Build one struct that user mode can consume.
2021-12-31 18:31:06 +08:00
GuardedRegion.h
Build one struct that user mode can consume.
2021-12-31 18:31:06 +08:00
Helpers.cpp
Now it can detect the ntoskrnl inline hook
2023-05-31 23:23:20 +08:00
Helpers.h
fixup a fatal bug in khook.
2023-05-28 21:39:46 +08:00
IoTimer.cpp
Add some kernel inject dll code
2022-09-05 08:38:10 +08:00
IoTimer.h
Add some kernel inject dll code
2022-09-05 08:38:10 +08:00
kDbgCore.h
Complete most of the DbgSys function
2023-03-30 22:49:13 +08:00
kDbgSys.cpp
Update the docs and fixup the x86 compile error
2023-04-24 19:30:11 +08:00
kDbgSys.h
Modified the DbgSys routines's name
2023-04-02 18:16:03 +08:00
kDbgUtil.cpp
Tweak a hug bug
2023-04-02 20:59:59 +08:00
kDbgUtil.h
Modified the DbgSys routines's name
2023-04-02 18:16:03 +08:00
KernelLibrary.vcxproj
Now it can detect the ntoskrnl inline hook
2023-05-31 23:23:20 +08:00
KernelLibrary.vcxproj.filters
Finish the ksocet tdi lib
2023-05-14 11:44:04 +08:00
KernelTimer.cpp
Can get the count of vad
2022-12-11 11:34:27 +08:00
KernelTimer.h
Add some kernel inject dll code
2022-09-05 08:38:10 +08:00
khook.cpp
Now it can detect the ntoskrnl inline hook
2023-05-31 23:23:20 +08:00
khook.h
Add some kernel inline hook detect code.
2023-05-30 15:21:09 +08:00
ksocket.cpp
Finish the ksocet tdi lib
2023-05-14 11:44:04 +08:00
ksocket.h
Finish the ksocet tdi lib
2023-05-14 11:44:04 +08:00
kstring.cpp
Delete some old source code
2021-11-14 12:27:47 +08:00
kstring.h
Delete some old source code
2021-11-14 12:27:47 +08:00
ktdi.cpp
Finish the ksocet tdi lib
2023-05-14 11:44:04 +08:00
ktdi.h
Finish the ksocet tdi lib
2023-05-14 11:44:04 +08:00
kvector.cpp
Delete some old source code
2021-11-14 12:27:47 +08:00
kvector.h
Finish the ksocet tdi lib
2023-05-14 11:44:04 +08:00
LinkedList.cpp
Delete some old source code
2021-11-14 12:27:47 +08:00
LinkedList.h
Delete some old source code
2021-11-14 12:27:47 +08:00
Logging.cpp
Add the log mechanism
2021-12-25 14:07:16 +08:00
Logging.h
Add some kernel inject dll code
2022-09-05 08:38:10 +08:00
LookasideList.cpp
Add the LookasideList and ExecutiveResource
2022-01-24 17:11:29 +08:00
LookasideList.h
Add the LookasideList and ExecutiveResource
2022-01-24 17:11:29 +08:00
Memory.cpp
Update the memory manage
2022-01-13 18:32:19 +08:00
Memory.h
Update the memory manage
2022-01-13 18:32:19 +08:00
MiniFilter.cpp
tweak some bugs in File Mini Filter
2023-02-22 11:00:47 +08:00
MiniFilter.h
tweak some bugs in File Mini Filter
2023-02-22 11:00:47 +08:00
Mutex.cpp
Delete some old source code
2021-11-14 12:27:47 +08:00
Mutex.h
Delete some old source code
2021-11-14 12:27:47 +08:00
NtMmApi.h
Update DbgkCreateThread function
2023-02-25 08:52:13 +08:00
NtWow64.h
Tweak some compile errors
2022-11-27 15:07:19 +08:00
ObjectAttributes.cpp
Delete some old source code
2021-11-14 12:27:47 +08:00
ObjectAttributes.h
Delete some old source code
2021-11-14 12:27:47 +08:00
pch.cpp
Delete some old source code
2021-11-14 12:27:47 +08:00
pch.h
Add the MiniFilter callback enum
2022-09-07 19:54:43 +08:00
PEParser.cpp
Add the driver module dump interface. But it still has memory access violation.
2023-01-08 21:37:56 +08:00
PEParser.h
Fixup the sys dump blue screen bug check
2023-02-18 14:35:45 +08:00
Process.cpp
Delete some old source code
2021-11-14 12:27:47 +08:00
Process.h
Delete some old source code
2021-11-14 12:27:47 +08:00
ProcessNetFilter.cpp
Finish the ksocet tdi lib
2023-05-14 11:44:04 +08:00
ProcessNetFilter.h
Finish the ksocet tdi lib
2023-05-14 11:44:04 +08:00
ProcessProtect.cpp
Delete some old source code
2021-11-14 12:27:47 +08:00
ProcessProtect.h
Delete some old source code
2021-11-14 12:27:47 +08:00
QueuedSpinLock.cpp
Delete some old source code
2021-11-14 12:27:47 +08:00
QueuedSpinLock.h
Delete some old source code
2021-11-14 12:27:47 +08:00
RegistryKey.cpp
Update the code from work computer
2022-12-06 19:13:18 +08:00
RegistryKey.h
Update the code from work computer
2022-12-06 19:13:18 +08:00
Section.cpp
Tweak some compile errors
2022-11-27 15:07:19 +08:00
Section.h
Tweak some compile errors
2022-11-27 15:07:19 +08:00
SpinLock.cpp
Delete some old source code
2021-11-14 12:27:47 +08:00
SpinLock.h
Delete some old source code
2021-11-14 12:27:47 +08:00
SysMon.cpp
Change the kdprint to LogInfo
2023-05-26 17:31:46 +08:00
SysMon.h
Modified the DbgSys routines's name
2023-04-02 18:16:03 +08:00
SysMonCommon.h
Delete some old source code
2021-11-14 12:27:47 +08:00
Teb.h
Add the teb struct
2022-08-10 19:20:27 +08:00
Thread.cpp
Delete some old source code
2021-11-14 12:27:47 +08:00
Thread.h
Delete some old source code
2021-11-14 12:27:47 +08:00
typesdefs.h
Bypass the vmp3.6 kernel debugger dectect.
2022-09-22 15:58:16 +08:00
VadHelpers.cpp
Complete most of the DbgSys function
2023-03-30 22:49:13 +08:00
VadHelpers.h
Complete most of the DbgSys function
2023-03-30 22:49:13 +08:00
WinExtHosts.cpp
Support dump the windows extension table function
2023-03-06 22:56:13 +08:00
WinExtHosts.h
Support dump the windows extension table function
2023-03-06 22:56:13 +08:00