Commit Graph

Select branches

Hide Pull Requests

master

#10

#106

#109

#11

#111

#114

#123

#128

#13

#133

#139

#14

#142

#145

#145

#146

#148

#149

#15

#158

#158

#159

#16

#160

#160

#162

#162

#164

#164

#17

#174

#174

#18

#20

#21

#26

#27

#28

#29

#30

#36

#36

#37

#37

#38

#39

#40

#45

#5

#59

#6

#62

#63

#73

#74

#78

#8

#9

docs-2019-05-17

idasdk

snapshot-2020-07-10_14-12-03

snapshot-2020-08-09_19-11-36

snapshot-2020-12-13_19-14-26

snapshot-2020-12-15_18-48-00

snapshot-2021-01-26_02-47-19

snapshot-2021-08-23_13-27-50

v1.4

Mono Color

• baa5c8e853 Anti-attach: increase function buffer sizes master Matthijs Lavrijsen 2023-07-30 01:07:02 +02:00
• b854ab1382 ScyllaTest: do not use SystemSessionProcessInformation Matthijs Lavrijsen 2023-07-30 01:05:52 +02:00
• 417d8d91b7 ntdll.h: const correctness Matthijs Lavrijsen 2023-07-30 01:00:32 +02:00
• 37b35ddcb1 Add Cheat Engine to hidden process/window lists Matthijs Lavrijsen 2023-05-11 23:23:54 +02:00
• 74d928f6a2 Add API monitor and new WinDBG to hidden process/window lists Matthijs Lavrijsen 2023-05-11 22:38:55 +02:00
• a727ac39e1 Remove dead AppVeyor link v1.4 Duncan Ogilvie 2023-03-24 13:16:08 +00:00
• 84d15bfc64 Pin marketplace actions + release notes Duncan Ogilvie 2023-03-24 13:15:08 +00:00
• cee6c0a1ad Merge pull request #148 from GDATAAdvancedAnalytics/fix-vmprotect Duncan Ogilvie 2023-02-11 05:58:18 +01:00
• 1463828845 Fix compilation of other plugins heck-gd 2023-02-10 16:11:56 +01:00
• b53c2f7314 Add compatibility for VMProtect 3.6+ heck-gd 2023-02-03 16:04:55 +01:00
• 480dc49de2 Fix XP support in GH releases by using the VS 2019 14.27 toolchain Matthijs Lavrijsen 2023-01-12 15:15:43 +01:00
• a0e5b8f2b1 Add Process Monitor blacklisted processes (#142) rise 2022-04-26 17:22:19 +08:00
• 30c956b27a Merge pull request #133 from x64dbg/gh-actions Duncan Ogilvie 2021-10-27 21:00:29 +02:00
• ea3e3c2d97 Build ScyllaHide with GitHub Actions Duncan Ogilvie 2021-10-27 19:08:45 +02:00
• 2b407b33ac Exclude IDA plugins from the default build Duncan Ogilvie 2021-10-27 19:08:13 +02:00
• 7e648fb29e Update default Themida settings profile snapshot-2021-08-23_13-27-50 Matthijs Lavrijsen 2021-08-23 15:27:50 +02:00
• 2276f14771 Add NtUserGetForegroundWindow hook snapshot-2021-01-26_02-47-19 Matthijs Lavrijsen 2021-01-26 03:47:19 +01:00
• 37ff0b3659 Fix regression in x64dbg plugin caused by 9ad0839d. Fixes #115 snapshot-2020-12-15_18-48-00 Matthijs Lavrijsen 2020-12-15 19:48:00 +01:00
• d2a719ce2e Fix IDA plugin build snapshot-2020-12-13_19-14-26 Matthijs Lavrijsen 2020-12-13 20:14:26 +01:00
• 9ad0839dc2 Fix according to newest x64dbg changes (#114) qfrtt 2020-12-13 20:06:49 +01:00
• 75fde06ac9 Enable OSBuildVersion in plugin menus (#109) Sam Russell 2020-09-09 10:50:28 -04:00
• 75fcdc539e Update to VS2019 snapshot-2020-08-09_19-11-36 Matthijs Lavrijsen 2020-08-09 21:11:36 +02:00
• 91c0a07609 Update README snapshot-2020-07-10_14-12-03 Duncan Ogilvie 2020-07-10 16:12:03 +02:00
• 70d6432c04 Fix release structure Duncan Ogilvie 2020-07-10 16:01:47 +02:00
• 1bfa584a4a Add XP/2003 x64 support for KiUserExceptionDispatcher hook Mattiwatti 2020-06-10 18:31:11 +02:00
• 706fec4350 Add 64 bit support for KiUserExceptionDispatcher (#106) Bill Bierman 2020-06-08 08:04:44 -10:00
• 2ce3ace33b Wow64GetModuleHandle64: use a real process handle Mattiwatti 2020-05-30 00:35:45 +02:00
• 59309a2057 Adjust OtherOperationCount after NtMapViewOfSection Mattiwatti 2020-05-17 00:27:27 +02:00
• 265940d076 Process suspend/resume: deal with threads at the max suspend count Mattiwatti 2020-05-05 02:01:12 +02:00
• 59b2955540 PebPatchProcessParameters: set WindowFlags and ShowWindowFlags to 0x1 Mattiwatti 2020-04-11 23:45:54 +02:00
• a3ae4b6b09 RestoreKernel32Hooks: unhook time functions Mattiwatti 2020-01-09 17:13:31 +01:00
• 1fb31fdd94 ApplyKernel32Hook: verify kernel[32|base] is loaded before hooking Mattiwatti 2019-12-25 14:33:09 +01:00
• ca54a69326 Fix pedantic Clang warning Mattiwatti 2019-12-25 14:28:31 +01:00
• 78f736e304 Fix missing user32.dll VAs in IDA plugin Mattiwatti 2019-12-24 09:57:10 +01:00
• acb15bbde0 Patch OS build numbers Mattiwatti 2019-12-24 01:33:35 +01:00
• 10ddb89fba ProcessDebugObjectHandle: handle overlapping buffer and return length Mattiwatti 2019-12-12 11:39:23 +01:00
• a596f7f5d2 Add TLS to HookLibrary for InstrumentationCallbackDisabled field Mattiwatti 2019-12-12 11:34:58 +01:00
• 0bd149aeff Update ntdll.h Mattiwatti 2019-12-12 11:27:38 +01:00
• 684af33c46 Instrumentation callback improvements and fixes Mattiwatti 2019-06-03 03:14:45 +02:00
• 4bc2f91915 Rewrite WOW64 hooking Mattiwatti 2019-06-02 13:15:29 +02:00
• 25d31f8bf4 Native x86: if DetourCreateRemote was used, restore hooks properly Mattiwatti 2019-06-02 13:13:42 +02:00
• 27450103d3 Enable /LARGEADDRESSAWARE for 32 bit plugins Mattiwatti 2019-06-02 13:12:30 +02:00
• 22e664f757 Remove dbghelp Mattiwatti 2019-06-02 13:11:51 +02:00
• bde2b49ada Better AppVeyor setup Duncan Ogilvie 2019-06-02 11:45:25 +02:00
• aeb612d283 Update release.bat for Appveyor Mattiwatti 2019-06-02 01:38:20 +02:00
• 49dc5014b7 Obsidium please (3/3) Mattiwatti 2019-05-31 22:38:22 +02:00
• 5ad4cb7ffa Obsidium please (2/3) Mattiwatti 2019-05-31 22:36:59 +02:00
• 88bc1b7810 Obsidium please (1/3) Mattiwatti 2019-05-31 22:30:52 +02:00
• 554d97fac4 This flag is not really magic Mattiwatti 2019-05-31 22:28:04 +02:00
• 9642f9737e Ignore return value in HOOK_NATIVE_NOTRAMP since it is always NULL Mattiwatti 2019-05-27 11:17:21 +02:00
• 2764afe265 Fix IDA plugin build (#78) Duncan Ogilvie 2019-05-24 01:01:21 +02:00
• 761ba53b0c Update release.bat Mattiwatti 2019-05-23 02:47:27 +02:00
• f2a9a0da5f Make user32/win32u.dll hooks work on Windows 10 WOW64 Mattiwatti 2019-05-23 01:02:33 +02:00
• a4773cea60 Better heap (force) flags clearing Mattiwatti 2019-05-22 05:17:54 +02:00
• 89920c9928 Fix memory leak in GetModuleBaseRemote Mattiwatti 2019-05-22 01:21:50 +02:00
• ad2e52013d Don't leave RWX pages around after hooking (change to RX) Mattiwatti 2019-05-22 01:21:33 +02:00
• f3f41ebe09 NtUserQueryWindow hook improvements Mattiwatti 2019-05-22 01:17:44 +02:00
• 5cb846fb3c Update README.md Mattiwatti 2019-05-18 10:21:30 +02:00
• d0fcb329ad Fix clang error re: pasting invalid preprocessor tokens (hdd->##name) Fix clang warning re: nonstandard implicit function pointer -> object pointer conversion Mattiwatti 2019-05-18 05:28:03 +02:00
• 26a796eb80 Only set the address of NativeCallContinue after all hooks are applied Mattiwatti 2019-05-18 05:01:14 +02:00
• 7bc1fa7de7 Fix NtUserBuildHwndList hook on Windows 8 and later Mattiwatti 2019-05-18 04:51:25 +02:00
• 956fea4e6d Improve NtUserBuildHwndList hook Mattiwatti 2019-05-18 03:25:07 +02:00
• 800ee1799a Update documentation PDF docs-2019-05-17 Mattiwatti 2019-05-17 02:15:03 +02:00
• 6817d32581 Remove NtApiCollection.ini Mattiwatti 2019-05-17 01:10:42 +02:00
• 1bd5c5c8fe Remove unused ntdll, kernel32/base and user32 handles from DLL data Mattiwatti 2019-05-17 00:58:18 +02:00
• a0591e2c35 Add "basic" profile that patches the PEB but does not hook Mattiwatti 2019-05-16 16:30:50 +02:00
• 562e201e23 Make it possible to create profiles that do not cause DLL injection Mattiwatti 2019-05-16 16:25:55 +02:00
• 6e02b9dda6 CLI injector: use settings for PEB patch instead of patching everything Dead code removal Mattiwatti 2019-05-16 15:51:18 +02:00
• 79a69ad694 Write hook DLL data inside the process suspend/resume block (#75) Mattiwatti 2019-05-08 12:58:38 +02:00
• 6d6436e22a Detect hooks before applying new ones and fail if one is found (#75) Mattiwatti 2019-05-07 21:09:40 +02:00
• 97b09f1b97 Make HookXxx functions return bool; false if DetourCreateRemote fails Mattiwatti 2019-05-07 21:06:07 +02:00
• f209f1c2a6 Suspend process when applying and restoring hooks Mattiwatti 2019-05-07 21:00:28 +02:00
• e9def6553a Merge branch 'master' of https://github.com/x64dbg/ScyllaHide Mattiwatti 2019-05-05 07:37:07 +02:00
• 7c19ce7867 Fix hooking syscalls with breakpoints (x64dbg process cookie query) Mattiwatti 2019-05-05 07:35:33 +02:00
• 569396b7cb Fix IDA x64 plugin Alex 2019-05-05 00:19:38 +03:00
• 0a03ffd378 Add Windows 10 WOW64 instrumentation callback hook Mattiwatti 2019-05-03 23:23:07 +02:00
• d16ca2d1c2 Move RealGetSystemTime and RealGetLocalTime to HookHelper.cpp Mattiwatti 2019-05-03 23:22:18 +02:00
• 03992788de SCMRevGen project: remove DisableFastUpToDateCheck Mattiwatti 2019-05-03 23:07:04 +02:00
• 3cd1bb344f Fix IDA plugin on WOW64 (#71) Mattiwatti 2019-05-03 20:43:25 +02:00
• caca9baa11 Update to VS2017 Mattiwatti 2019-05-03 15:59:09 +02:00
• 00df152134 Fix deprecated warning with newer Windows SDKs Mattiwatti 2019-05-03 15:57:04 +02:00
• 0f93740bef Disable Spectre mitigation crap Mattiwatti 2019-05-03 10:27:32 +02:00
• 78e64c6dab Add fallback path to make_scmrev.h.bat in case git is not installed Mattiwatti 2019-05-03 10:27:13 +02:00
• 1abb233fa5 Improve handling of 'Distorm opcode no I_MOV' error Mattiwatti 2019-05-03 00:27:29 +02:00
• 05ea4e66ff Remove uses of FlushInstructionCache Mattiwatti 2019-05-02 23:25:00 +02:00
• 01e60c8cc5 Add version info to plugin DLLs Mattiwatti 2019-05-02 22:34:40 +02:00
• 92a3955aa6 Update .gitignore Mattiwatti 2019-05-02 22:09:41 +02:00
• 96d46e2213 Put the ScyllaHide ghost icon on a diet Mattiwatti 2019-05-02 22:08:39 +02:00
• be1a55a464 Update ntdll.h Mattiwatti 2019-05-02 14:08:01 +02:00
• 395cae5f9c Add git version info Mattiwatti 2019-05-02 11:32:30 +02:00
• 0490dfedfa Validate bitness of DLL files before injecting them DLL injection: turn error messages into LogError() calls instead of LogInfo() Mattiwatti 2019-04-28 22:24:29 +02:00
• 59e6d23bf8 Don't pass THREAD_CREATE_FLAGS_SUPPRESS_DLLMAINS when injecting a DLL Mattiwatti 2019-04-28 20:25:43 +02:00
• 66ec9ad514 Add x64 instrumentation callback hook Mattiwatti 2019-04-05 13:00:11 +02:00
• d26e4dde45 Update ntdll.h Mattiwatti 2019-04-05 00:18:39 +02:00
• b125c69235 Disable Spectre mitigation crap Mattiwatti 2019-04-04 20:44:16 +02:00
• dfec5d0e2f NtGetContextThread: if debug registers were requested, zero them Mattiwatti 2019-03-25 23:26:47 +01:00
• 7218d2b085 CLI injector: kill anti-attach if specified in options Mattiwatti 2019-03-11 20:37:56 +01:00
• 117f7ff2a4 CLI injector: remove debug privileges if specified in options Mattiwatti 2019-03-11 20:36:48 +01:00
• 7dfe524ef2 Dead code removal Mattiwatti 2019-03-11 20:29:04 +01:00
• 141c5f18be ApplyAntiAntiAttach: make sure page is RWX before writing to it Mattiwatti 2019-03-06 19:22:57 +01:00