sina
|
3961196112
|
add support for SMI related functionalities
|
2025-08-02 23:18:18 +02:00 |
|
sina
|
15061014c7
|
Fixed retrieving valid watching process IDs for the execution trap and user-mode execution prevention
|
2025-07-08 19:41:08 +02:00 |
|
sina
|
e8e0489a6b
|
fix removing process from pausing list
|
2025-06-29 20:22:51 +02:00 |
|
sina
|
d6f0e22928
|
intercept the execution when the module loaded on the user debugger
|
2025-06-28 18:53:35 +02:00 |
|
sina
|
2637965512
|
apply user mode debugger to the kernel debugger
|
2025-06-26 19:14:29 +02:00 |
|
sina
|
cc8167c089
|
only apply thread interception to user mode
|
2025-06-24 18:12:02 +02:00 |
|
sina
|
6893c1b19f
|
change user debugger from supervisor bit of regular page table to mbec
|
2025-06-21 02:59:44 +02:00 |
|
sina
|
e7a7668325
|
get process name and process id for the transparent mode
|
2025-06-11 01:43:19 +02:00 |
|
sina
|
0e649c6107
|
check for race condition while configuring the transparent mode
|
2025-06-10 23:59:21 +02:00 |
|
sina
|
bba0bd2a4c
|
fix changes from transparent-mode to syscall callback
|
2025-06-08 08:58:40 +02:00 |
|
sina
|
bdfd1f30eb
|
change the syscall callback initialization scope
|
2025-06-08 00:06:52 +02:00 |
|
sina
|
664e84a14f
|
fixing compilation errors and add hyperevade callbacks
|
2025-06-07 23:57:04 +02:00 |
|
sina
|
1eb9606073
|
add dynamic system call numbers for transparent mode
|
2025-06-06 23:01:29 +02:00 |
|
Sina Karvandi
|
d0610661ba
|
Merge pull request #521 from CokeTree3/SysCall-transparency
Windows system call transparency
|
2025-06-06 22:01:04 +02:00 |
|
sina
|
04e3e1e6f5
|
update versioning and changelog
|
2025-06-04 20:10:20 +02:00 |
|
unknown
|
0d5ee6ab60
|
implement microsleep function
|
2025-06-02 11:26:48 +02:00 |
|
CokeTree3
|
d44e2ff219
|
Small fix
|
2025-05-30 12:28:50 +02:00 |
|
CokeTree3
|
a443283a71
|
SystemCall handler hooking
|
2025-05-04 20:50:34 +02:00 |
|
sina
|
5c92dca212
|
add logging mechanism for RDMSR and WRMSR
|
2025-02-14 16:48:32 +01:00 |
|
SinaKarvandi
|
b7b2b303d8
|
add new description for changing script engine constants
|
2025-01-25 18:37:54 +01:00 |
|
SinaKarvandi
|
0bb3398b30
|
move the idt query functions from debugger to hypervisor
|
2024-12-30 05:04:07 +01:00 |
|
SinaKarvandi
|
bb9c4e30d7
|
add support for IO APIC
|
2024-11-19 13:56:22 +01:00 |
|
SinaKarvandi
|
a6c6c88d05
|
show different APIC modes (x2apic or xapic)
|
2024-11-09 15:08:32 +01:00 |
|
SinaKarvandi
|
f09fc83643
|
store APIC fields in user-mode constructed structures
|
2024-11-08 18:46:52 +01:00 |
|
SinaKarvandi
|
ac87707a0b
|
add support to read Local APIC in xAPIC and x2APIC modes
|
2024-11-08 15:14:12 +01:00 |
|
SinaKarvandi
|
14f463e6eb
|
fix unhooking monitor hooks on a different process or if the process is closed (#409)
|
2024-07-05 17:29:39 +09:00 |
|
SinaKarvandi
|
48c362255e
|
build based on new libhyperdbg
|
2024-06-24 18:05:54 +09:00 |
|