Commit Graph
100 Commits
Author SHA1 Message Date
Maurice Heumann 4cd7e711f7 Prepare vector implementation 2022-12-21 10:38:03 +01:00
Maurice HeumannandGitHub 952e89adae Merge pull request #4 from momo5502/dependabot/submodules/external/FindWDK-76f5f3e
Bump external/FindWDK from `0492964` to `76f5f3e`
2022-10-04 14:09:10 +02:00
momo5502 9bf0b94e29 Fix typo 2022-09-02 19:43:15 +02:00
momo5502 cf013601b8 Don't sign the driver 2022-08-25 20:52:44 +02:00
Maurice HeumannandGitHub 2fad5d0684 Update memory.cpp 2022-08-22 10:23:21 +02:00
Maurice HeumannandGitHub 620de17a01 Update memory.cpp 2022-08-22 10:12:15 +02:00
Maurice HeumannandGitHub 6253a44356 Update README.md 2022-08-21 11:56:32 +02:00
Maurice HeumannandGitHub 842de71a69 Merge pull request #3 from momo5502/dependabot/submodules/external/FindWDK-0492964
Bump external/FindWDK from `43fd504` to `0492964`
2022-07-11 15:03:50 +02:00
momo5502 325118892d Fix compilation 2022-06-18 11:19:00 +02:00
Maurice HeumannandGitHub 1519181150 Merge pull request #2 from momo5502/feature/integrity-analysis
Feature/integrity analysis
2022-06-18 10:59:23 +02:00
momo5502 ab6e9808b5 Prevent bug checks due to race conditions
Zeroing the read access before the write access can result in
an ept misconfiguration (page writable, but not readable) if a
separate core accesses the same page inbetween the zeroing.
2022-05-16 12:39:59 +02:00
momo5502 7c1e10d164 Finish access watching 2022-05-16 12:17:11 +02:00
momo5502 f37a919f77 Fix watch points 2022-05-16 11:51:33 +02:00
momo5502 4d1f94d65a More code watching progress
... but it still bug checks
2022-05-16 10:15:57 +02:00
momo5502 c8817b3ee4 Quick and dirty code watching bridge for usermode/kernelmode 2022-05-16 09:20:37 +02:00
momo5502 11effb4efa Prepare code watching 2022-05-15 21:47:08 +02:00
momo5502 8510755ea4 Remove experiments 2022-05-15 21:46:23 +02:00
momo5502 e77359be93 Prepare integrity analysis 2022-05-15 15:09:38 +02:00
momo5502 ffb7fc4a69 Experimental hypervisor-wide ept hooking 2022-05-15 13:07:42 +02:00
momo5502 76fcdd0d8e Reflect memory writes to shadow page 2022-05-15 13:07:17 +02:00
momo5502 489fba2b60 Nvidia certificate was revoked :( 2022-05-15 13:06:38 +02:00
momo5502 b09cf1130e Show console in window mode 2022-05-11 20:21:25 +02:00
Maurice HeumannandGitHub 7a9c19e0fd Update main.cpp 2022-05-11 08:16:43 +02:00
Maurice HeumannandGitHub 8480a6dedf Update CMakeLists.txt 2022-05-11 08:16:27 +02:00
momo5502 33bc8d9036 Prepare adding the launcher 2022-05-10 20:07:58 +02:00
momo5502 c71541bdbb Use ninja 2022-05-08 16:17:09 +02:00
momo5502 75e6abe9d5 Fix heap space issues 2022-05-07 18:32:16 +02:00
momo5502 a9ee35965b Add vs build presets 2022-05-07 18:04:49 +02:00
momo5502 4a5596c55c Switch to vs2022 2022-05-07 18:00:43 +02:00
momo5502 b39f4d8674 Add msbuild 2022-05-07 17:56:56 +02:00
momo5502 2cfe71f783 Build using visual studio 2022-05-07 17:51:44 +02:00
momo5502 66af09fa78 Wait for WDK install 2022-05-07 17:38:06 +02:00
momo5502 45687cb862 Upgrade 2022-05-07 17:35:08 +02:00
momo5502 00e4c57dba More fixes 2022-05-07 17:32:19 +02:00
momo5502 fbc0a1ac55 Setup devcmd 2022-05-07 17:30:53 +02:00
momo5502 1c8907af3f Fix install 2022-05-07 17:25:51 +02:00
momo5502 fa4a56c467 Download fix 2022-05-07 17:23:43 +02:00
momo5502 2c66683683 Better downloading 2022-05-07 17:17:48 +02:00
momo5502 19d23903e5 Add filename 2022-05-07 17:11:29 +02:00
momo5502 857281532c Try installing WDK 2022-05-07 17:10:10 +02:00
momo5502 c6c8114db1 Compile with cl 2022-05-07 17:01:53 +02:00
momo5502 1bb069f693 Some fixes 2022-05-07 16:57:30 +02:00
momo5502 c68882513c Try adding a github workflow 2022-05-07 16:54:29 +02:00
momo5502 ed9ed1da2f T6 tests 2022-05-07 16:54:18 +02:00
momo5502 c58f6c9742 Fix formatting 2022-04-25 19:47:22 +02:00
momo5502 4ec4055e4b Nice mw3 experiments 2022-04-25 19:42:51 +02:00
momo5502 9ce9e1299c Rename project 2022-04-24 21:23:54 +02:00
momo5502 3036aebc70 Add license 2022-04-24 21:23:54 +02:00
momo5502 c6b6e1eba9 More cleanup and readme 2022-04-24 21:23:54 +02:00
momo5502 1d25ce3a94 Update icon 2022-04-24 21:23:54 +02:00
momo5502 28c9145268 Resource tests 2022-04-24 21:23:54 +02:00
momo5502 93a88c5d7a Cleanup 2022-04-24 21:23:54 +02:00
momo5502 40b6f5efae More cleanup 2022-04-24 21:23:54 +02:00
momo5502 1b14d5f657 Support copying 2022-04-24 21:23:54 +02:00
momo5502 4a3958d149 Fix ninja builds 2022-04-24 21:23:54 +02:00
momo5502 85904bfd13 Small cleanup 2022-04-24 21:23:54 +02:00
momo5502 965dd3a5bc Fix formatting 2022-04-24 21:23:54 +02:00
momo5502 90e2c262ad Cleanup 2022-04-24 21:23:54 +02:00
momo5502 3b8a02b8fb Remove bad SAL annotation 2022-04-24 21:23:54 +02:00
momo5502 aa6da95b8a Add write probing 2022-04-24 21:23:54 +02:00
momo5502 db4e69f5be Cleanup hook irp 2022-04-24 21:23:54 +02:00
momo5502 ea6f18ea5e Fix stack corruption during hypervisor launch 2022-04-24 21:23:54 +02:00
momo5502 42ec6413c9 Fix compilation 2022-04-24 21:23:54 +02:00
momo5502 5c2886fea0 More cleanup 2022-04-24 21:23:54 +02:00
momo5502 d2f2c9dfc5 Cleanup 2022-04-24 21:23:54 +02:00
momo5502 44b142f266 Remove unnecessary function 2022-04-24 21:23:54 +02:00
momo5502 ae8714d728 More hooks 2022-04-24 21:23:54 +02:00
momo5502 811d11af97 Some cleanup 2022-04-24 21:23:54 +02:00
momo5502 ce27636f3c More tests 2022-04-24 21:23:54 +02:00
momo5502 378c52eb47 More stuff 2022-04-24 21:23:54 +02:00
momo5502 4b06fcbd70 WOW64 hooking test 2022-04-24 21:23:54 +02:00
momo5502 3d4145b6a4 Small fixes 2022-04-24 21:23:54 +02:00
momo5502 30daca5444 Add ept translation hints 2022-04-24 21:23:54 +02:00
momo5502 77785486ae Hook tests 2022-04-24 21:23:54 +02:00
momo5502 4c3e5d78ac Implement threading 2022-04-24 21:23:54 +02:00
momo5502 00e31a84f5 More experiments 2022-04-24 21:23:54 +02:00
momo5502 e2f73e0aeb More progress 2022-04-24 21:23:54 +02:00
momo5502 2acac5bee2 Ept hooking 2022-04-24 21:23:54 +02:00
momo5502 b141d43497 Find pml1 table if virtual address lookup fails 2022-04-24 21:23:54 +02:00
momo5502 e02e065bd5 Basic ept hooking 2022-04-24 21:23:54 +02:00
momo5502 fd03a49992 Move ept logic into ept module 2022-04-24 21:23:54 +02:00
momo5502 d5a5d61c8d Add missing annotation 2022-04-24 21:23:54 +02:00
momo5502 dfa1172f34 Prepare ept hooking 2022-04-24 21:23:54 +02:00
momo5502 c7e29af2b5 Formatting 2022-04-24 21:23:54 +02:00
momo5502 6f440c9c56 Fixes 2022-04-24 21:23:54 +02:00
momo5502 6390a962f7 More refactoring, but state is broken :( 2022-04-24 21:23:54 +02:00
momo5502 62553eeae6 GDT cleanup 2022-04-24 21:23:54 +02:00
momo5502 098ea6c1b8 Improvements 2022-04-24 21:23:52 +02:00
momo5502 c807dd2167 More cleanup 2022-04-05 19:05:03 +02:00
momo5502 7645ffa4b4 More cleanup 2022-04-05 18:30:53 +02:00
momo5502 d317a308c5 More cleanup 2022-04-05 18:17:54 +02:00
momo5502 4f2b1e79a7 Add va function 2022-04-05 18:17:39 +02:00
momo5502 1f986d5588 Handle assertions as runtime errors 2022-04-05 18:17:29 +02:00
momo5502 970c9571b2 More tests 2022-04-03 19:26:21 +02:00
momo5502 42c7f649f9 More irp implementation 2022-04-03 19:10:04 +02:00
momo5502 01ed54e8a2 Even more cleanup 2022-04-03 14:22:03 +02:00
momo5502 17e10a93ea More cleanup 2022-04-03 10:58:31 +02:00
momo5502 e9f0a14fff More cleanup 2022-04-03 08:20:36 +02:00
momo5502 386015f94b Optimize check 2022-04-02 20:29:55 +02:00
momo5502 4a5d9ba0b0 No need for this exception as new already throws 2022-04-02 20:27:14 +02:00