Future/hypervisor
1
0
Fork 0
mirror of https://github.com/momo5502/hypervisor.git synced 2025-08-31 05:57:27 +00:00
Code Activity

More irp implementation

Browse Source
This commit is contained in:
momo5502
2022-04-03 19:10:04 +02:00
parent 01ed54e8a2
commit 42c7f649f9
12 changed files with 271 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
src/driver/irp.cpp
View File

@@ -3,8 +3,9 @@
#include "logging.hpp"
#include "exception.hpp"
#include "string.hpp"
#include "memory.hpp"
#define HELLO_DRV_IOCTL CTL_CODE(FILE_DEVICE_UNKNOWN, 0x800, METHOD_NEITHER, FILE_ANY_ACCESS)
#include <irp_data.hpp>
namespace
{
@@ -32,6 +33,19 @@ namespace
return STATUS_SUCCESS;
}
// TODO: This is vulnerable as fuck. Optimize!
void apply_hook(hook_request* request)
{
const auto address = reinterpret_cast<uint64_t>(request->target_address);
const auto aligned_address = address & (PAGE_SIZE - 1);
const auto offset = address - aligned_address;
uint8_t buffer[PAGE_SIZE * 2]{0};
memory::query_process_physical_page(request->process_id, reinterpret_cast<void*>(address), buffer);
debug_log("Data: %s\n", buffer + offset);
}
_Function_class_(DRIVER_DISPATCH) NTSTATUS io_ctl_handler(
PDEVICE_OBJECT /*device_object*/, const PIRP irp)
{
@@ -51,6 +65,9 @@ namespace
case HELLO_DRV_IOCTL:
debug_log("Hello from the Driver!\n");
break;
case HOOK_DRV_IOCTL:
apply_hook(static_cast<hook_request*>(irp_sp->Parameters.DeviceIoControl.Type3InputBuffer));
break;
default:
debug_log("Invalid IOCTL Code: 0x%X\n", ioctr_code);
irp->IoStatus.Status = STATUS_INVALID_DEVICE_REQUEST;