9736eb9de4
fixed g_HashCacheLockOffset check
...
previously the check was for g_KernelHashBucketListOffset but should have been for g_HashCacheLockOffset , this prevents kdmapper failing in case g_HasCacheLockOffset is null
2026-03-21 13:17:59 +05:30
62aee31bed
Fix MmFreeIndependentPages pattern
2025-12-23 01:35:33 +01:00
4b80ef3f76
No sense on double release attempt
2025-11-15 13:52:55 +01:00
d67c70021f
Fix if check
2025-11-15 13:44:43 +01:00
a6808c7bdc
More info for failed loads and fix Log/Utils collision on other projects
2025-10-21 10:25:25 +02:00
f929de1225
Fix code warnings
2025-08-18 11:27:50 +02:00
3b62d2f9d0
Refactor driver API
...
- Removed device_handle parameter from all API functions
- Functions now use the hDevice handle declared in intel_driver namespace
- Improved readability and simplified API usage
2025-08-16 23:07:40 +03:00
1a46ed3f42
Refactor status code handling to use NTSTATUS constants
...
- Replaced hardcoded NTSTATUS values with descriptive constants from <ntstatus.h>
- Added safe include for <ntstatus.h> with macro redefinition warning disabled
- Improved readability and maintainability by avoiding magic numbers
2025-08-16 21:20:51 +03:00
216de3bb42
Runtime driver timestamp
...
Replaced hardcoded iqvw64e_timestamp with a runtime timestamp
retrieved from the vulnerable driver's NT headers to avoid
manual updates when the driver binary changes.
2025-08-15 02:46:42 +03:00
9ae7fe50f2
Adjust patterns for WDFilter
2025-07-14 14:33:02 +02:00
b6af1ea92a
Added WdFilter.sys in PDB offsets
2025-04-29 18:41:00 +05:30
4cd7e56dce
Little project cleanup
2025-03-17 16:35:57 +01:00
719017328a
- Excluding WdFilter.sys from PDB offsets
...
- fixing MmFreeIndependentPages bug
2025-03-17 00:56:16 +01:00
19e12cf63a
Symbols refactor...
2025-02-09 03:44:30 +01:00
ae753c5df1
Major Code Update
2024-12-19 20:36:19 +01:00
176e83b29f
enabled PDB_OFFSETS and cleaned code
2024-12-15 22:10:18 +01:00
3c9b452827
brought back the original method of getting kernel functions addresses for compatibility
...
(use "#define PDB_OFFSETS" to enable the method )
2024-12-15 20:52:48 +01:00
84e2a26ec1
added symbols handler
2024-12-14 16:06:01 +01:00
631256de87
Refresh independent pages allocation
2024-10-07 19:30:49 +02:00
858d0c6afe
mdl allocation moved to branch
2024-10-07 18:00:38 +02:00
5c83427142
Support Windows 24H2
2024-10-07 17:44:37 +02:00
447bf2db00
Merge pull request #144 from gykkuo/master
...
Support windows 11 24H2
2024-10-04 19:18:11 +02:00
f253856b4e
Improved messages to reduce issues in github...
2024-07-11 20:54:05 +02:00
be899ff426
Update intel_driver.cpp
2024-07-01 16:38:52 +09:00
6bee3a33fe
Support windows 11 24H2
...
test on 26100.1000
2024-07-01 12:37:47 +09:00
277b0a57df
Extra help messages and auto stop for newbies users
2024-02-29 08:48:48 +01:00
68f4168dbd
Update intel_driver.cpp
...
Support Wdfilter 4.18.24010.7
2024-01-29 11:24:49 +08:00
9152ffc465
Removed compiler warning
2023-09-09 03:36:35 +02:00
4cbd5d200e
Implemented Wdfilter cleaning from 2018 to 2022 drivers and Fixed some memory leaks
...
+ WDFilter Tested from to (4.18.1806-4.18.2201)
+ Fixed some memory leaks
2023-09-09 03:17:36 +02:00
24b0527790
Allocate independent pages with better patterns
2023-09-07 11:54:35 +02:00
26071e6e01
Add allocation mode with MmAllocateIndependentPagesEx
2023-09-07 11:54:35 +02:00
ada0382b2a
Simple rand fix
2023-09-06 09:42:11 +02:00
3a21e3a5a8
Changed pool tag
...
Changed pool tag since an extremely meme checking diff between allocation size and average for detection....
2022-07-31 20:06:20 +02:00
0d4e8bf144
more strict unload
2021-10-31 23:36:24 +01:00
f29a30f107
Fixed dead lock in piddbcache cleaning lookup
2021-10-31 23:09:33 +01:00
cf161e4534
Windows 22449.1 pattern update
2021-09-13 12:39:57 +02:00
43e5bcb42b
PiDDBLock Pattern Updated for Windows 11 22000.132+
2021-08-19 15:19:06 +02:00
3e6703a324
warning removed with DISABLE_OUTPUT
2021-08-17 23:01:49 +02:00
3a67cc7314
mdl allocation integrated back, Thanks to psec
2021-08-17 22:00:59 +02:00
e0c154b9a6
mdl code removed until psec have stable code with his doubts resolved
2021-08-12 11:50:48 +02:00
0f699641f2
merged https://github.com/TygoL/kdmapper-mdl
2021-08-10 22:53:52 +02:00
ee7eb6db0c
Fixed detections cleaning PiDBCacheTable
2021-06-26 23:06:24 +02:00
5fdcbdac5b
Source modified to full unicode
2021-06-25 13:16:19 +02:00
0072a3b324
Fixed name line jump
2021-06-25 10:29:05 +02:00
ca8cfe8e61
Fixed BSOD with Cleaning of g_KernelHashBucketList, Fixed BSOD with Cleaning of MmUnloadedDrivers, Improved the race condition of the system hook hooking NtAddAtom
2021-06-24 20:49:53 +02:00
74175619fa
Fix g_KernelHashBucketList in Windows 'N'
2021-04-03 19:30:39 +02:00
accb8ef1a5
Randomize file size before delete
2021-02-10 10:38:14 +01:00
1be8b5c920
update for windows build 21286
2021-02-09 21:52:16 +01:00
95ec5decd0
g_KernelHashBucketList cleaning
2021-02-09 10:46:17 +01:00
17af20d7a9
destroy vul driver information before unlink from the disk
2021-01-25 22:22:46 +01:00
Moni