11 Commits

Author	SHA1	Message	Date
Matt Graeber	fcdd3ad642	Explicitly casting types as [Type] ... The latest version of .NET added generics to many of the InteropService methods. Therefore, all of my uses of types need to be explicitly cast with [Type].	2013-08-17 17:55:31 -04:00
Matt Graeber	298561f26b	Forgot to add CodeIntegrityInformation to help	2013-07-04 14:59:24 -04:00
Matt Graeber	2a45cfbd1e	Get-NtSystemInformation can now query UMCI info ... Get-NtSystemInformation now returns SystemCodeIntegrityInformation - i.e. user-mode code integrity settings. This required reverse engineering a dll that is only present on Windows 8 ARM devices.	2013-07-04 13:01:47 -04:00
Matt Graeber	02c982dd18	Type names added to Get-NtSystemInformation ... When displaying handle information, you can now filter by and display object type names: Get-NtSystemInformation	2013-06-01 09:55:04 -04:00
Matt Graeber	9b4b3dcc73	Silly me. Just discovered the SetOffset method. ... Thanks @JosephBialek!	2013-05-29 18:32:24 -04:00
Matt Graeber	c98734a764	Added _SYSTEM_LOCK_INFORMATION struct ... Yet another method of leaking kernel pointers.	2013-05-16 20:21:04 -04:00
Matt Graeber	c17f16bf0e	Cleaned up Get-NtSystemInformation ... * Removed the unnecessary NTSTATUS entries * Used splatting instead of backticks * Fixed a n00b memory management error as well.	2013-05-13 21:18:48 -04:00
Matt Graeber	f32a572fb9	Object access mask now displays properly	2013-05-12 15:28:44 -04:00
Matt Graeber	a1a842a218	Removed duplicate type definition	2013-05-12 13:22:30 -04:00
Matt Graeber	781e48c570	Removed some extraneous comments	2013-05-12 12:41:32 -04:00
Matt Graeber	ea0dc9a2b8	Added Get-NtSystemInformation ... Get-NtSystemInformation is a wrapper function for NtQuerySystemInformation. It is a swiss-army knife tool for obtaining internal OS information. It can currently be used to query the following: global flags, handles, objects, kernel pool allocations, and loaded kernel modules	2013-05-12 10:27:15 -04:00