105 commits

Author	SHA1	Message	Date
sina	c37ec6f3c0	apply command to the target thread from MBEC	2025-08-23 01:30:12 +02:00
sina	8e111d93c6	remove extra code from XSETBV command	2025-08-21 00:39:35 +02:00
sina	77029f330d	add XSETBV event extension command	2025-08-21 00:17:26 +02:00
Sina Karvandi	91831c0d95	Merge pull request #545 from unlockable/monitor_bug_fix ... Fix: An infinite vm-exit bug for !monitor x command	2025-08-20 17:02:11 +02:00
copilot-swe-agent[bot]	972786821f	Fix additional grammar/spelling: contractions, duplicate words, hyphenation ... Co-authored-by: SinaKarvandi <13383992+SinaKarvandi@users.noreply.github.com>	2025-08-20 12:54:26 +00:00
copilot-swe-agent[bot]	8a5f696544	Fix grammar and spelling errors: perfrom->perform, occured->occurred, recieved->received ... Co-authored-by: SinaKarvandi <13383992+SinaKarvandi@users.noreply.github.com>	2025-08-20 12:49:07 +00:00
Seonjin Hwang	bc6010d061	Fix: after patch 0.14, there is an infinite vm-exit bug for \!monitor x which freeze hyperdbg. It simply fixs the bug	2025-08-20 14:53:38 +09:00
sina	c655a7705e	avoid saving and restoring nonvolatile XMM registers	2025-08-18 21:54:21 +02:00
sina	16f64afd4f	check for the compatibility of Intel CET to for emulating SYSCALL and SYSRET	2025-08-17 17:33:13 +02:00
sina	61d45c518d	move pool allocations to a single function	2025-08-17 16:25:02 +02:00
sina	ece94e748f	update ia32-doc submodule to update the correct value for VMCS PL3 SSP	2025-08-17 16:17:16 +02:00
sina	39920ccfa5	change VMX headers to IA32doc headers	2025-08-17 14:26:38 +02:00
sina	360b0e5863	support CET SYSCALL emulation on VMCS	2025-08-17 13:51:32 +02:00
sina	cdadcfaded	add CET emulation for syscall extension command	2025-08-14 12:21:53 +02:00
sina	00c0add449	Restore XMM registers before VMXOFF	2025-08-09 23:45:40 +02:00
sina	464e7c6736	Fix unloading (VMXOFF) crash when restoring XMM registers	2025-08-03 23:31:49 +02:00
sina	3f877c36f5	create XMM register structures for VM-entries	2025-08-03 01:18:58 +02:00
sina	853e5c9511	save and restore XMM registers and enable hyperevade optimization	2025-08-03 00:41:28 +02:00
sina	3961196112	add support for SMI related functionalities	2025-08-02 23:18:18 +02:00
sina	945ae55563	check for EPT hooks above 512 GB	2025-07-22 01:21:11 +02:00
sina	fdd5dfc55e	fix shifting correct number of bytes on the PML3 PFN	2025-07-21 02:30:11 +02:00
sina	24d9a93531	set out of range MMIO ranges as uncacheable	2025-07-21 01:43:24 +02:00
sina	369908f64c	add support for extra reserved addresses for out of 512 GB range MMIO addresses	2025-07-21 01:14:39 +02:00
sina	3c92e09a51	fix crash on using TPAUSE instruction on Windows 11 24h2	2025-07-19 17:53:06 +02:00
sina	3d73a95b8f	check for uninitializing memory pools for the debugger	2025-07-15 00:02:11 +02:00
sina	891382fa50	check the accessibility of address based on process id	2025-07-09 23:49:12 +02:00
sina	7ae6ad8e37	added kernel side support for putting breakpoint in the user debugger	2025-07-09 22:38:36 +02:00
sina	15061014c7	Fixed retrieving valid watching process IDs for the execution trap and user-mode execution prevention	2025-07-08 19:41:08 +02:00
sina	0e5ff45c30	set user mode execute bit for different core EPTPs	2025-07-08 00:10:43 +02:00
sina	e8e0489a6b	fix removing process from pausing list	2025-06-29 20:22:51 +02:00
sina	d6f0e22928	intercept the execution when the module loaded on the user debugger	2025-06-28 18:53:35 +02:00
sina	8aa8289236	adjust mbec and user debugger initialization	2025-06-28 04:28:39 +02:00
sina	a93b78dfad	use the same EPTP for MBEC	2025-06-28 03:54:07 +02:00
sina	2637965512	apply user mode debugger to the kernel debugger	2025-06-26 19:14:29 +02:00
sina	fe4dd107cb	add hyperdbg test mode for the user debugger	2025-06-25 18:48:11 +02:00
sina	cc8167c089	only apply thread interception to user mode	2025-06-24 18:12:02 +02:00
sina	6893c1b19f	change user debugger from supervisor bit of regular page table to mbec	2025-06-21 02:59:44 +02:00
sina	e7a7668325	get process name and process id for the transparent mode	2025-06-11 01:43:19 +02:00
sina	0e649c6107	check for race condition while configuring the transparent mode	2025-06-10 23:59:21 +02:00
sina	7df82a1b5a	make separate msr read, msr write and trap flag handling	2025-06-08 10:07:19 +02:00
sina	17914a34c7	separate vmx and syscall footprints	2025-06-08 09:28:56 +02:00
sina	bba0bd2a4c	fix changes from transparent-mode to syscall callback	2025-06-08 08:58:40 +02:00
sina	bdfd1f30eb	change the syscall callback initialization scope	2025-06-08 00:06:52 +02:00
sina	664e84a14f	fixing compilation errors and add hyperevade callbacks	2025-06-07 23:57:04 +02:00
sina	872947677e	link hyperevade to hyperhv	2025-06-07 21:57:57 +02:00
sina	afd5879bd2	move transparency functions to hyperevade	2025-06-07 20:17:05 +02:00
sina	29d9dc684e	fill the system-calls from user-mode	2025-06-07 00:09:27 +02:00
sina	1eb9606073	add dynamic system call numbers for transparent mode	2025-06-06 23:01:29 +02:00
Sina Karvandi	d0610661ba	Merge pull request #521 from CokeTree3/SysCall-transparency ... Windows system call transparency	2025-06-06 22:01:04 +02:00
sina	04e3e1e6f5	update versioning and changelog	2025-06-04 20:10:20 +02:00