admin/hasherezade-tiny_tracer
1
0
Fork 0
mirror of https://github.com/hasherezade/tiny_tracer synced 2026-06-08 14:36:37 +00:00
Code Issues Packages Projects Releases Wiki Activity
626 Commits 6 Branches 32 Tags
3.2
Commit Graph

91 Commits

Author SHA1 Message Date
hasherezade 510ecaaadf [REFACT] Cleanup in types 2025-10-27 16:23:19 -08:00
hasherezade 89c7eafe83 [FEATURE] In AntiDebug: watch for GetLocalTime 2025-06-05 12:26:28 -07:00
hasherezade c4cceaad87 [FEATURE] In AntiDebug: watch for GetSystemTime 2025-06-05 11:17:58 -07:00
hasherezade ff810bcf38 [REFACT] Use the new function to check if pointer is readable 2025-06-05 09:48:21 -07:00
hasherezade 8387e5be05 [FEATURE] In AntiDebug: support GetTickCount64 2025-06-05 09:43:51 -07:00
hasherezade facbf4a450 [FEATURE] Allow to replace volume serial ID with a value from the INI file 2025-06-04 16:38:32 -07:00
hasherezade f988023af3 [FEATURE] Display tick count in the default mode. Modify in deep mode 2025-06-04 08:47:20 -07:00
hasherezade 8777f6e70a [FEATURE] Enable altering tick count in AntiDebug deep mode 2025-06-04 08:32:37 -07:00
hasherezade 2cca90cd35 [NOBIN] Removed pre-build events (no longer used) 2025-02-02 09:07:38 -08:00
hasherezade 7e6a39c7af [BUGFIX] Fixed emulating trap flag (Issue #69) 2024-12-29 14:13:13 -08:00
hasherezade 9b2a559cbd [BUGFIX] Fixed Trap Flag simulation (Issue #69) 2024-12-29 05:39:31 -08:00
Hồng Thất Công e9eb506c0f Update makefile 
- Update makefile.rules
- Fix bug in AntiDebug.cpp
 2024-10-15 18:59:38 +07:00
hasherezade ffd40f0d9e [FEATURE] New option in Settings: EMULATE_SINGLE_STEP - allow to enable or disable exception on trap flag 2024-08-24 04:19:15 -08:00
hasherezade 236250803c [REFACT] Moved instrumenting TrapFlag to AntiDebug 2024-08-24 02:57:38 -08:00
hasherezade 35bf51a3c2 [REFACT] Cleaned and simplified functions retrieving PEB fields 2024-08-23 03:52:49 -07:00
hasherezade eeed2da249 [REFACT] Verified read PEB size 2024-08-23 03:27:53 -07:00
hasherezade 819eba430d [BUGFIX] Fixed installing callbacks after the function 2024-08-12 11:48:20 -07:00
hasherezade 4deda0a669 [REFACT] Refactored evasion callbacks after function 2024-08-12 10:40:31 -07:00
hasherezade de74a70327 [FEATURE] Store function arguments in before callback 2024-08-12 07:12:56 -07:00
hasherezade a4a6b3cd53 [FEATURE] Added callbacks before and after in EvasionInfo 2024-08-12 06:24:18 -07:00
hasherezade eda4474028 [REFACT] Changed global variable to static. More descriptive info about KernelDebugger 2024-08-10 17:16:34 -07:00
hasherezade 4f426e2213 [REFACT] Renamed functions to show installation point 2024-08-10 16:58:28 -07:00
hasherezade 529b472566 [FEATURE] Moved functions lists of AntiVm/AntiDbg into EvasionWatch 2024-08-10 16:39:31 -07:00
hasherezade 498a3f537e [REFACT] Moved installing callbacks into a separate function 2024-08-09 16:44:58 -07:00
hasherezade 3312c1bfcd [REFACT] Moved AntiDbg/AntiVm common parts to EvasionWatch 2024-08-09 12:57:27 -07:00
hasherezade d21ce2deb5 [FEATURE] Monitor AntiDbg functions called by syscalls 2024-08-09 12:37:01 -07:00
hasherezade 2984a4f168 [REFACT] Refactored watching AntiDbg functions 2024-08-09 12:09:50 -07:00
hasherezade 3dd0228dfb [REFACT] Changed trap flag implementation 2024-08-09 10:38:04 -07:00
hasherezade e23fad4bcf [REFACT] Wrap a variable in AntiDebug namespace 2024-08-09 09:56:36 -07:00
hasherezade d78a9f5fec [REFACT] Wrap global variables used by AntiDebug into a separate namespace 2024-08-09 09:52:57 -07:00
cecio 38b9ce71c2 [FEATURE] Added AntiDebug API OutputDebugString 2023-11-06 22:08:44 +01:00
cecio 9764c17e5b [FEATURE] Added AntiDebug API SwitchDesktop 2023-11-06 21:55:19 +01:00
cecio 9172f0cccc [FEATURE] Added AntiDebug API GetWindowText 2023-11-06 14:30:40 +01:00
cecio fc8a098808 [FEATURE] Added AntiDebug API NtSetInformationThread 2023-09-24 23:50:27 +02:00
cecio c55048dfbb [FEATURE] Added some additional AntiDebug API tracking 2023-09-10 22:50:36 +02:00
cecio 7049d73c25 [FEATURE] Added INT1 in AntiDebug 2023-09-07 21:31:28 +02:00
hasherezade 3352201d60 [BUGFIX] Fixed ANTIDEBUG=2 not working for 32-bit applications. Fixed backward compat with older Pin versions (use INS_OperandWidth instead of INS_OperandSize) 2023-08-26 13:43:17 -07:00
hasherezade 05a820c58f [BUGFIX] In AntiDbg::WatchCompareSoftBrk: moved checks before the instrumentation function. Do not use ins.q() to pass instruction 2023-08-25 17:20:20 -07:00
hasherezade 780a70b752 [REFACT] Small cleanup. Removed unused function. Version up: 2.7 2023-08-25 15:50:12 -07:00
hasherezade f206fa4d12 Merge branch 'master' into master 2023-08-26 00:08:07 +02:00
hasherezade 4b92b89395 [BUGFIX] In Software Debug checks: reworked to remove FPs, check only comparison of the 2nd operand. Only immediate. 2023-08-25 09:11:40 -07:00
hasherezade 9c9a8cc28f [BUGFIX] Before throwing the exception, make sure that the trap flag was set from the same thread. Confirmed bypass of VMProtect ant-dbg checks (Issue #26) 2023-08-17 15:08:20 -07:00
hasherezade 277f0f1d7c [BUGFIX] In Trap Flag bypass: removed skipping the first instruction 2023-08-17 14:54:20 -07:00
Andrea Naspi c4579a254d [FEATURE] AntiDebug: bypass VMProtect anti-debug check based on Trap Flag (#45) 2023-08-17 23:39:37 +02:00
cecio 43175ae0cf [FEATURE] AntiDebug Software Breakpoints detection 2023-08-17 16:50:38 +02:00
hasherezade 6b00551b85 [REFACT] Use common function to log AntiVm and AntiDebug messages 2023-08-16 17:01:38 -07:00
hasherezade 3863f17063 [REFACT] In Windows version check: removed unused variables 2023-08-16 16:40:46 -07:00
hasherezade 49c808389e [REFACT] Do not use Windows.h by default 2023-08-15 08:34:50 -07:00
hasherezade 76d9cce5ee [REFACT] In system info: removed debug strings 2023-08-15 08:28:40 -07:00
hasherezade 817211caae [REFACT] Use PIN functions to retrieve OS version and bitness (rather then Windows native functions) 2023-08-15 08:18:05 -07:00