208 Commits

Author SHA1 Message Date
hfiref0x 7ddb5bc882 Add DBPACK and packed resource DB support
Introduce DBPACK tool and packed resource database support.
Adds a new DBPACK utility and project (Source/Utils/DBPACK) and a kdu.db resource; provides dbmanifest.txt and moves many per-driver/data binaries into the packer data area.
Clean up Tanikaze project files and filters to remove many inlined resource entries and update resource.rc/resource.h to reference the single kdu.db RCDATA.
Several binary resource files were updated as part of the packing process.
v1.4.9
2026-06-12 21:54:21 +07:00
hfiref0x 10780fa586 Add LECO driver information to providers.md 2026-06-12 10:45:29 +07:00
hfiref0x 31edcfb279 v 1.4.9
Add LECO LECOMA driver as provider 64
2026-06-12 10:41:14 +07:00
hfiref0x eaa3c21a4c v 1.4.9
PGRHostControl typo fix
2026-06-10 23:51:01 +07:00
hfiref0x 56cb54f8c3 Update PGRHostControl driver information 2026-06-10 23:49:42 +07:00
hfiref0x e9d9bbbdeb Add Point Grey Research PGRHostControl driver entry 2026-06-10 11:17:12 +07:00
hfiref0x 843839d6c8 v 1.4.9
Add FLIR PGRHostControl driver as provider 63
2026-06-10 11:13:01 +07:00
hfiref0x 7d13110307 v 1.4.9
Better handling for embedded certificates for list/listcsv commands
2026-06-08 00:16:06 +07:00
hfiref0x 861f70d3a3 Update providers.md
Update WinIo driver publisher information
2026-06-08 00:07:29 +07:00
hfiref0x 5a80d74792 Update README to include '-listcsv' command
Added new command '-listcsv' to README for CSV output of providers.
Moved providers table and metadata into separate markdown file.
2026-06-06 19:13:25 +07:00
hfiref0x 63405ad122 v 1.4.9
Update usage example
2026-06-06 19:08:06 +07:00
hfiref0x 93338d4dbc v 1.4.9
Added new command -listcsv to export database metadata into csv file format
KDUDB: introduce AdvisoryId to hold specific MITRE CVE id if present, update gProvEntry entries
KDUDB: signer information now parsed in-memory from provider image during -list/-listcsv commands
2026-06-06 19:03:00 +07:00
hfiref0x 357d482e8c Document MSFT blacklist types in providers.md
Added MSFT blacklist types section to providers.md.
2026-06-06 18:49:40 +07:00
hfiref0x db8edd9c4d Create providers.md for KDU Providers documentation
Added detailed documentation for KDU Providers including metadata and advisory information.
2026-06-06 18:47:25 +07:00
hfiref0x 66998a098e Add hashing and Matrox driver; update physmap
Added Matrox driver as provider 62
Update list command: display file SHA1, Authenticode SHA1, page SHA1, page SHA256 hashes for each provider in database
Update readme: add provider 62 to the descriptions table and provide hashes
2026-06-06 12:42:34 +07:00
hfiref0x 8577e85188 Update README.md
Add provider 61 to the descriptions table and provide hashes
2026-06-05 12:35:08 +07:00
hfiref0x b538466159 v 1.4.9
Added AMD affdriver (RPMC) as provider 61
2026-06-05 12:29:18 +07:00
hfiref0x ffafa4c6ec Update CHANGELOG.txt 2026-06-05 12:25:56 +07:00
hfiref0x b8d965bf31 Correct function comment for RipRelativeStore32
Fix another typo
2026-05-30 21:52:45 +07:00
hfiref0x 8ab1b1cfc2 Update comments
Update descriptions (rename from their debug names)
2026-05-30 21:47:13 +07:00
hfiref0x 93d7b7d5ad Merge pull request #139 from hfiref0x/dev148-patch
Refactor CI query and add CI.dll synthetic tests
2026-05-30 07:38:18 +03:00
hfiref0x 26c4e3dbc8 Add synthetic g_CiOptions query tests
Add synthetic CI.dll tests and integrate them into the project.
2026-05-30 11:24:55 +07:00
hfiref0x 260c0a0e23 Fix for Win8/8.1
Add RIP-relative 32-bit mov store detector to avoid false positive on g_CiKernelApis
2026-05-30 02:00:34 +07:00
hfiref0x a8097ee58c Refactor CI query
Address #138
Update headers
2026-05-29 18:22:31 +07:00
hfiref0x 670482fe1b Update tests
Added test case for DSE query
v1.4.8
2026-05-02 22:41:24 +07:00
hfiref0x 590c6dcb1e Add embedded providers DB and loader
Introduce an embedded providers database and wire it into the build.
2026-04-02 23:22:56 +07:00
hfiref0x 383f8929a2 Add hypervisor & environment detection and fixes
Improve diagnostics and fix some bugs

Signed-off-by: hfiref0x <hfiref0x@users.noreply.github.com>
2026-04-02 13:14:30 +07:00
hfiref0x 882159642a Update changelog and README with new providers
Update README provider table: add providers 58–60 (Teledyne CorMem, Digital Elect. Corp Ipctype, Shangke WinHwDrv).
2026-03-30 21:45:39 +07:00
hfiref0x 3ea37018d0 Merge pull request #129 from hfiref0x/dev148
Added Teledyne CorMem driver as provider 58
Added Digital Electronics Corp. Ipctype driver as provider 59
Added Guangzhou Shangke Information Technology Co., Ltd. WinHwDrv driver as provider 60
2026-03-30 20:00:16 +07:00
hfiref0x 1be07da558 v 1.4.8
Added Guangzhou Shangke Information Technology Co., Ltd. WinHwDrv driver as provider 60
2026-03-30 11:35:57 +07:00
hfiref0x e7b47f2fbc Update consts.h 2026-03-28 17:30:46 +07:00
hfiref0x 5867217277 v 1.4.8
Added Digital Electronics Corp. Ipctype driver as provider 59
2026-03-28 17:26:53 +07:00
hfiref0x e3a516f93e v 1.4.8
Added Teledyne CorMem driver as provider 58
2026-03-28 13:42:11 +07:00
hfiref0x 3ac550b996 Update copyright year in LICENSE file v1.4.7 2026-03-27 12:44:57 +07:00
hfiref0x 4fa73a1ad9 Fix typo in Lenovo driver name in README 2026-03-27 12:44:17 +07:00
hfiref0x 3458bf75c5 v 1.4.7
Added Lenovo LnvMSRIO (CVE-2025-8061) as provider 57
Centralized Superfetch-based virtual->physical translation and per-page kernel read/write logic for providers 55, 56 and 57
Readme update
2026-03-27 12:41:58 +07:00
hfiref0x 19b0b81717 Update msbuild commands to include SolutionDir
Added SolutionDir parameter to msbuild commands for various projects.
2026-03-23 11:14:35 +07:00
hfiref0x 0da0e4a15c Add GitHub Actions workflow for building KDU
This workflow builds multiple projects including Taigei, PCOMP, Tanikaze, and Hamakaze, and prepares their outputs for deployment.
2026-03-23 11:11:52 +07:00
hfiref0x 3d5e63fbf0 v 1.4.6
Add KDU_EPROCESS_OFFSETS and KDUGetEprocessOffsets to centralize EPROCESS offsets (PsProtection and mitigation flags) and refactor ps.* logic to use the new API. Add provider callback verification before performing PS patches. Fix multiple bugs: correct instruction validation logic in dsefix, use explicit size cast in zemana, handle NULL SD case and avoid double-free in ipcsvc, add dbghelp existence check before LoadLibrary in sym, rename TEXT_SECTION_LEGNTH->TEXT_SECTION_LENGTH and use it in victim, and add retry limit for IPC connect. Update many embedded driver/resource binaries accordingly.
v1.4.6
2026-02-17 16:53:14 +07:00
hfiref0x 8f0d8df9b8 Add CHANGELOG.txt and update README
Introduce a comprehensive CHANGELOG.txt documenting releases up to v1.4.5 (provider additions, fixes, build/tooling updates, and other notes). Also update README.md to add a Changelog heading and link to the new CHANGELOG file.
2026-02-17 10:04:28 +07:00
hfiref0x 55be2e638f Update README with new build badge and copyright
Updated build status badge and copyright year.
2026-01-11 10:03:15 +07:00
hfiref0x 9c1826f6f6 Merge pull request #125 from fxrstor/master
providers: add Toshiba TPwSav
2025-12-20 10:40:18 +07:00
fxrstor 05fa67ba5b providers: add Toshiba TPwSav 2025-12-19 22:11:11 +05:30
hfiref0x 6aed10d103 Add decompression support to PCOMP utility
Updated PCOMP to support a decompression mode via the '-d' argument. Updated project files to add new source, adjust toolset, and support case-insensitive string comparison. Minor fix in sup.cpp to use SystemSuperfetchInformation enum.
2025-12-19 22:54:05 +07:00
hfiref0x 8db325c601 Merge pull request #126 from lebr0nli/windows-server-2022-support
Add Windows Server 2022 support for `-ps` and `-pm` commands
2025-12-19 22:43:50 +07:00
Alan Li d26678973f Add Windows Server 2022 support for -ps and -pm commands 2025-12-07 15:36:06 +08:00
hfiref0x d97e5a3801 Refactor physical memory IO and improve driver calls
Replaces DeviceIoControl with supCallDriverEx for physical memory read/write operations in tpup.cpp, improving error handling and status checks. Removes unused global variable, updates logging messages, and fixes type usage in sup.cpp for better reliability and code clarity.
v1.4.5
2025-12-03 07:55:36 +07:00
hfiref0x 53358e15a4 Add UNREFERENCED_PARAMETER for Context in TestSuperfetch
Added UNREFERENCED_PARAMETER(Context) to suppress unused parameter warning in the TestSuperfetch function.
2025-12-02 19:30:47 +07:00
hfiref0x 6d7b57f66f Merge branch 'master' of https://github.com/hfiref0x/KDU 2025-12-02 19:22:24 +07:00
hfiref0x 1b3a3bbc5c v1.4.5
Migrated to MSVS 2026 with latest SDK and build tools
Added TechPowerUp ThrottleStop (CVE-2025-7771) as provider 55
Added physical and kernel memory read/write via Superfetch translation support
Readme and RTL's update
2025-12-02 19:22:13 +07:00