admin/hasherezade-pe-sieve
1
0
Fork 0
mirror of https://github.com/hasherezade/pe-sieve synced 2026-06-08 14:34:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 98788a6ef9 Updated sig_finder master hasherezade 2026-06-06 14:45:56 +02:00
  • 75ed00dec8 deploy: 5f5fbfd4ab gh-pages hasherezade 2026-05-31 19:48:52 +00:00
  • 5f5fbfd4ab [VERSION] 0.4.1.5 hasherezade 2026-05-31 11:48:25 -08:00
  • 81583700a7 deploy: 8999ab8211 hasherezade 2026-05-31 19:47:53 +00:00
  • 8999ab8211 [FEATURE] Increase the score for memory areas with shellcode patterns found hasherezade 2026-05-31 11:47:23 -08:00
  • a3bd0cd2bc [FEATURE] Limit context scan to dormant threads hasherezade 2026-05-31 11:46:47 -08:00
  • ef83bb15a5 deploy: 3aebdf8dd5 hasherezade 2026-05-31 19:42:39 +00:00
  • 3aebdf8dd5 [FEATURE] In ThreadScanner: added native callstack for WoW64 processes hasherezade 2026-05-31 11:36:09 -08:00
  • 2b94019a9d [FEATURE] Reverted: In case of WoW64 processes, cut analysis after the first frame that leads to unknown module wow64_callstack hasherezade 2026-05-31 19:38:56 +02:00
  • 0e8748a808 [FEATURE] Skip stack-local top-of-stack return candidates hasherezade 2026-05-31 19:19:50 +02:00
  • 812a350a29 [FEATURE] Thread scanner: skip stack-local pseudo-PC candidates hasherezade 2026-05-31 18:59:42 +02:00
  • 5c0d7a88fe [FEATURE] Increase the score for memory areas with shellcode patterns found hasherezade 2026-05-31 18:16:49 +02:00
  • 8d79502755 [FEATURE] Limit context scan to dormant threads hasherezade 2026-05-31 18:16:01 +02:00
  • 85e12b7f10 [FEATURE] In case of WoW64 processes, cut analysis after the first frame that leads to unknown module hasherezade 2026-05-31 18:13:33 +02:00
  • e3ea4e87a3 [BUGFIX] Corrected capturing WoW64 callstack hasherezade 2026-05-31 17:21:16 +02:00
  • 54be63cd3a deploy: 33bea937b2 hasherezade 2026-05-31 14:38:27 +00:00
  • 33bea937b2 [BUGFIX] Fixed isWow check. Fixed _ctx_details initialization hasherezade 2026-05-31 16:38:01 +02:00
  • ecf75b0231 deploy: 1945b71ec1 hasherezade 2026-05-31 13:14:23 +00:00
  • 1945b71ec1 [BUGFIX] In ThreadScanner: changes in the syscall integration checks hasherezade 2026-05-31 05:13:56 -08:00
  • 4fa77b8423 deploy: b9498e8b84 hasherezade 2026-05-31 01:01:39 +00:00
  • b9498e8b84 [BUGFIX] In ThreadScan: don't invalidate earlier findings if couldn't open thread hasherezade 2026-05-31 03:01:11 +02:00
  • 9072b1c958 deploy: 22067f3dfd hasherezade 2026-05-31 00:40:27 +00:00
  • 22067f3dfd [BUGFIX] Cleanup checking if the process reflection inialized properly hasherezade 2026-05-31 02:39:57 +02:00
  • 65203df2cf deploy: a477eedd7e hasherezade 2026-05-31 00:06:25 +00:00
  • a477eedd7e [BUGFIX] Fixed false positived in thread scan: more cautious handling of the stack with 1 frame hasherezade 2026-05-31 02:06:03 +02:00
  • 9dd149c06b deploy: 27fa8f5127 hasherezade 2026-05-30 23:53:26 +00:00
  • 27fa8f5127 [BUGFIX] Fixed closing the process snapshot. Fixed reporting suspicious addresses in thread scan hasherezade 2026-05-31 01:52:58 +02:00
  • 5c367ce987 deploy: 5ab29b8180 hasherezade 2026-05-30 23:07:25 +00:00
  • 5ab29b8180 [BUGFIX] Reverted: Scan threads via process snapshot if available. Fixed snapshot inialization and cleanup. hasherezade 2026-05-31 01:06:58 +02:00
  • f1e476d0ab deploy: fe23cbe392 hasherezade 2026-05-30 22:14:04 +00:00
  • fe23cbe392 [FEATURE] Scan threads via process snapshot if available hasherezade 2026-05-31 00:13:36 +02:00
  • 0546ef2cd5 deploy: e55def9b8b hasherezade 2026-05-30 21:34:27 +00:00
  • e55def9b8b [VERSION] 0.4.1.4 hasherezade 2026-05-30 23:34:03 +02:00
  • 79c058e2e1 [FEATURE] In Thread Scan: report all suspicious areas, dump only the strongest candidate (#135) hasherezade 2026-05-30 23:30:42 +02:00
  • 0854a2d945 deploy: 08066dbcb8e05571562cab0c803727f999472097 hasherezade 2026-05-30 21:27:42 +00:00
  • ad7bececc9 deploy: d8bb650863fd2a9608522811f1526390267cfeae hasherezade 2026-05-30 19:08:33 +00:00
  • 58f39eed08 deploy: e92da72954 hasherezade 2026-05-30 15:35:31 +00:00
  • e92da72954 [FEATURE] In ThreadScanner: assess the indicators once, at the end of the scan hasherezade 2026-05-30 17:34:56 +02:00
  • 4b0db06263 deploy: 4fe7ced3f4 hasherezade 2026-05-30 15:01:44 +00:00
  • 4fe7ced3f4 [FEATURE] In ThreadScanner: improved .NET filtering hasherezade 2026-05-30 17:01:19 +02:00
  • 6706e214ba deploy: b06934af73 hasherezade 2026-05-30 14:48:18 +00:00
  • b06934af73 [NOBIN] Fixed a typo in the constant's name hasherezade 2026-05-30 16:47:54 +02:00
  • 842ed0efed deploy: 12ecb1353b hasherezade 2026-05-30 14:46:24 +00:00
  • 12ecb1353b [FEATURE] In ThreadScanner: proceed with the scan even if retrieving the callstack failed hasherezade 2026-05-30 16:46:01 +02:00
  • f1f356b250 deploy: 2c19b575ec hasherezade 2026-05-30 14:35:00 +00:00
  • 2c19b575ec [FEATURE] In ThreadScanner: scan waiting threads regardless of the wait reason hasherezade 2026-05-30 16:34:40 +02:00
  • 9c49b06731 deploy: 4390eeb938 hasherezade 2026-05-30 14:27:17 +00:00
  • 4390eeb938 [BUGFIX] In fetch_threads_info: validate thread array bounds hasherezade 2026-05-30 16:26:57 +02:00
  • 1f5cf9cf60 deploy: 037b6c777b hasherezade 2026-05-30 14:02:52 +00:00
  • 037b6c777b [BUGFIX] Allow for the thread scan even if the symbols are uninitialized hasherezade 2026-05-30 16:02:24 +02:00
  • 804cbee6ef deploy: 7f2b889958 hasherezade 2026-05-30 13:47:40 +00:00
  • 7f2b889958 [FEATURE] In thread scan report: keep both allocation protection and current protection of the region hasherezade 2026-05-30 15:47:21 +02:00
  • 0ac5a69f5f deploy: fa6e673673 hasherezade 2026-05-30 13:39:45 +00:00
  • fa6e673673 [BUGFIX] In thread scanner: reject all uncommited pages hasherezade 2026-05-30 15:37:11 +02:00
  • 9566e7a865 Updated libpeconv hasherezade 2026-05-30 15:36:24 +02:00
  • bc69175777 deploy: a050993f51 hasherezade 2026-05-30 13:04:54 +00:00
  • a050993f51 [BUGFIX] Fixe compatibility with MinGW. Added dbghelp to linked libs hasherezade 2026-05-30 15:04:05 +02:00
  • 87b185bb4b deploy: 515ffa3eae hasherezade 2026-05-29 23:42:42 +00:00
  • 515ffa3eae [BUGFIX] Fixed hardcoded 64-bit types hasherezade 2026-05-29 15:42:03 -08:00
  • e9526752be deploy: 414cd2dd90 hasherezade 2026-05-29 22:50:37 +00:00
  • 414cd2dd90 [BUGFIX] In query_thread_details: more tolerance for returned length hasherezade 2026-05-29 14:50:09 -08:00
  • c74f138050 deploy: dd08f0261d hasherezade 2026-05-29 22:44:15 +00:00
  • dd08f0261d [BUGFIX] Don't terminate query_threads_detailson first failure hasherezade 2026-05-29 14:43:41 -08:00
  • 510b0afc6c deploy: 7739565b5c hasherezade 2026-05-29 22:42:12 +00:00
  • 7739565b5c [BUGFIX] Fixed hardcoded 64-bit types hasherezade 2026-05-29 14:41:40 -08:00
  • c13d9924a2 deploy: 253eb0ac4c hasherezade 2026-05-29 16:29:52 +00:00
  • 253eb0ac4c [BUGFIX] Fixed derefered flag. Thread safe usage of DbgWalk in ThreadScanner hasherezade 2026-05-29 08:29:17 -08:00
  • aa96998f6f deploy: 1f026f44ae hasherezade 2026-05-29 15:16:29 +00:00
  • 734e6d8fc2 [FEATURE] Propagate symbols to multiple scanners propagate_symbols hasherezade 2026-05-29 07:15:32 -08:00
  • 1f026f44ae [REFACT] Fixed a typo in a variable name hasherezade 2026-05-29 06:47:45 -08:00
  • e3ebc5fa1c deploy: 7692298706 hasherezade 2026-05-29 13:53:53 +00:00
  • 7692298706 [BUGFIX] Disable derefered symbols when thread scan is enables. Do not walk the stack in a new thread hasherezade 2026-05-29 05:53:10 -08:00
  • 01d004ea1e deploy: b7efce3ae6 hasherezade 2026-05-28 18:50:52 +00:00
  • b7efce3ae6 [BUGFIX] Use DebugHelp via thread-safe wrapper hasherezade 2026-05-28 10:50:23 -08:00
  • fc746be57a deploy: efcdeaacd7 hasherezade 2026-05-25 00:34:27 +00:00
  • efcdeaacd7 [BUGFIX] Fixed loading symbols on demand, allow to use local symsrv.dll hasherezade 2026-05-24 16:33:52 -08:00
  • f28e508b57 deploy: 136d38e2d9 hasherezade 2026-05-24 18:53:20 +00:00
  • 136d38e2d9 [FEATURE] Added argument sym to commandline hasherezade 2026-05-24 10:52:45 -08:00
  • d17a89a2b6 deploy: f1dc39d419 hasherezade 2026-05-03 01:09:11 +00:00
  • f1dc39d419 [REFACT] Hidden a debug string hasherezade 2026-05-02 17:08:38 -08:00
  • c363d6d41d deploy: 6c20de481a hasherezade 2026-05-03 00:57:41 +00:00
  • 6c20de481a Merge branch 'symbols1' hasherezade 2026-05-02 16:56:57 -08:00
  • 8e90a90e79 [FEATURE] Allow for more detailed symbol resulution, inclusing PDBs downloaded on demand hasherezade 2026-05-02 16:52:22 -08:00
  • 23d49fa3d1 Updated libpeconv hasherezade 2026-04-18 02:12:24 +02:00
  • feaa8146f8 [FEATURE] Updated version in the manifest hasherezade 2026-04-14 15:09:41 +02:00
  • 0127b735e6 [REFACT] Removed PrintDbg from custom ntddk hasherezade 2026-04-14 15:00:51 +02:00
  • b0529fd4df Updated libpeconv hasherezade 2026-04-14 13:44:44 +02:00
  • 3ab9351a9d Updated paramkit hasherezade 2026-04-08 01:59:12 +02:00
  • 244031db81 Updated paramkit hasherezade 2026-04-07 16:33:15 +02:00
  • df74774e2b Updated paramkit hasherezade 2026-04-07 04:24:03 +02:00
  • 1e4effe63e deploy: 9e32da0779 hasherezade 2026-04-07 01:44:51 +00:00
  • 9e32da0779 [REFACT] Updated paramkit. Refactored print_in_color to use it hasherezade 2026-04-07 03:44:19 +02:00
  • 75427f3a48 Updated paramkit hasherezade 2026-04-07 02:17:07 +02:00
  • 1b531f7c47 [NOBIN] Refactored CMake file: the option if PE-sieve should be build as EXE, DLL, or a static LIB is not selectable from multiple choice list hasherezade 2026-04-02 00:28:44 +02:00
  • b7027a79fb deploy: 07a6d78bcc hasherezade 2026-04-01 18:06:00 +00:00
  • 07a6d78bcc [NOBIN][bindings] Added information about minimal supported Python version hasherezade 2026-04-01 20:05:24 +02:00
  • 4dea53c700 deploy: 504c103b97 hasherezade 2026-04-01 18:02:55 +00:00
  • 504c103b97 [BUGFIX][bindings] Fixed demo in Python bindings hasherezade 2026-04-01 20:02:24 +02:00
  • 9c9dc137a5 [BUGFIX][bindings] Fixed PE-sieve version in Python bindings hasherezade 2026-04-01 20:00:27 +02:00
  • d21fc19506 deploy: e278e76971 hasherezade 2026-04-01 17:51:36 +00:00