admin/ayoubfaouzi-al-khaser
1
0
Fork 0
mirror of https://github.com/ayoubfaouzi/al-khaser synced 2026-06-06 15:14:33 +00:00
Code Issues Packages Projects Releases Wiki Activity
292 Commits 7 Branches 2 Tags
008934a3b4a3ac424d94de68ce17a62e89cc514f
Commit Graph

34 Commits

Author SHA1 Message Date
Graham Sutherland 008934a3b4 Initial work on the ATA IDENTIFY checks 
Added the code needed to execute the ATA IDENTIFY command on a disk. Currently it dumps the data out via OutputDebugString.
 2018-07-11 23:07:02 +01:00
Tal Liberman e31d023496 Call GetProcAddress to obtain pointers to EnumSystemFirmwareTables and GetSystemFirmwareTable since they aren't available on XP. 2018-06-17 18:28:13 +03:00
LordNoteworthy 21a8da4ce6 Check if process have admin rights in MSAcpi_ThermalZoneTemperature check 2018-04-30 10:55:36 +02:00
LordNoteworthy daf7077dc0 add anti-vm check for vmware using system firmware tables 2018-03-14 21:41:44 +01:00
Lord Noteworthy acb318bf85 add IsElevated() routine 2016-10-21 20:54:26 +02:00
Lord Noteworthy 3df5d6f67d fix issue related to printing mac adr 2016-10-19 21:28:56 +02:00
Lord Noteworthy f632bbc202 fix some compilation warning issues 2016-10-19 19:53:15 +02:00
Lord Noteworthy e2770bf9c6 output cleanup 2016-08-02 13:11:22 +02:00
Lord Noteworthy 55d2abf42b add setupdi_diskdrive anti-vm trick + main cleanup 2016-08-02 13:02:23 +02:00
Lord Noteworthy 8e6148cd24 add task state segment trick via STR 2016-07-17 12:55:01 +02:00
Lord Noteworthy 6e49feb4ff support only 32bit for LDT, GDT, IDT VM checks 2016-07-15 07:42:35 +02:00
Lord Noteworthy 736e74f963 add Global Descriptor Table (GDT) VM check 2016-07-15 07:35:04 +02:00
Lord Noteworthy 09b8e24488 add Local Descriptor Table (LDT) VM check 2016-07-15 07:28:27 +02:00
Lord Noteworthy 333424d751 add Interupt Descriptor Table (IDT) VM check 2016-07-15 07:17:18 +02:00
Lord Noteworthy f511ae10f0 add anti analysis tools - process based 2016-06-06 20:32:09 +02:00
Lord Noteworthy 2ec2a5e545 cleanup WMI detections tricks and add vbox_eventlogfile_wmi 2016-04-25 21:08:18 +02:00
Lord Noteworthy 93567503b0 update readme 2016-03-23 21:16:32 +01:00
Lord Noteworthy 1fe1fcffc6 add wmi win32 bios vmware check 2016-03-09 15:18:24 +01:00
Lord Noteworthy 51ca06051c add vmware adapter name check 2016-03-07 22:46:48 +01:00
Lord Noteworthy f1039737c5 add vmware mac adr check 2016-03-07 20:50:44 +01:00
Lord Noteworthy 8ea0f6c022 add Sleep->SleepEx->NtDelayExecution 2016-02-14 09:13:46 +01:00
Lord Noteworthy c1780029e8 update code 2016-02-06 19:20:52 +01:00
Lord Noteworthy cef1412963 add vbox process list anti vm check 2016-01-26 06:46:14 +01:00
Lord Noteworthy 64fc7a8065 add RunPE injection 2016-01-10 22:15:21 +01:00
Lord Noteworthy 5d6bc63b99 add QueueUserAPC Injection 2016-01-06 14:08:27 +01:00
Lord Noteworthy e69e931dde Add RtlCreateUserThread injection 2016-01-03 19:27:12 +01:00
Lord Noteworthy 3966b2651f code cleanup for code injection techniques 2016-01-01 12:47:08 +01:00
Lord Noteworthy d04d9c5166 SetWindowsHooksEx 2015-12-31 21:13:21 +01:00
Lord Noteworthy 2d7eaf2f44 add debug priv for createremotethread 2015-12-29 08:21:08 +01:00
Lord Noteworthy 8c90ff64ba add NtQueryObject : ObjectTypeInformation anti debug 2015-12-10 21:42:48 +01:00
Lord Noteworthy ccf99a9783 add SeDebugPrivilege Anti debug 2015-12-01 21:34:39 +01:00
Lord Noteworthy f02134acfa add ParentProcess AntiDebug 2015-11-30 20:36:29 +01:00
Lord Noteworthy 87ab29da04 add Software Breakpoints detection 2015-11-16 23:23:27 +01:00
Lord Noteworthy dc35663960 Add Utils functions 2015-11-12 21:46:34 +01:00