Sinaei
|
9d239ccdfd
|
query for process type (32-bit or 64-bit) from VMX-root and IOCTL
|
2023-07-20 15:52:34 +09:00 |
|
Sinaei
|
737f27bc9b
|
add new aliases for u, u2 as u64 and u32
|
2023-07-17 18:53:51 +09:00 |
|
Sinaei
|
b7a476dd0f
|
update err messages for not specifying pid in the debugger mode
|
2023-07-17 16:10:13 +09:00 |
|
Sinaei
|
249320d8c9
|
fix #243 loading 32-bit modules based on SysWOW64
|
2023-07-17 01:13:53 +09:00 |
|
Sinaei
|
d468105ff3
|
make symbol search case-insensitive
|
2023-07-16 21:14:03 +09:00 |
|
Sinaei
|
8e9918d560
|
change system32 paths to wow64 addresses for 32-bit programs
|
2023-07-16 04:00:09 +09:00 |
|
Sinaei
|
9f711cf05b
|
query for 32-bit or 64-bit modules from the kernel
|
2023-07-14 21:01:58 +09:00 |
|
Sinaei
|
895b14fed6
|
change .pagein command help
|
2023-07-14 19:28:56 +09:00 |
|
Sinaei
|
a76e858915
|
add trap flag mask callback
|
2023-07-14 15:39:02 +09:00 |
|
Sinaei
|
400a402319
|
delivered page-fault injection request in the kernel
|
2023-07-13 18:43:35 +09:00 |
|
Sinaei
|
8f3405b4ef
|
user-mode part of sending page-fault injection
|
2023-07-13 17:59:33 +09:00 |
|
Sinaei
|
cc99978919
|
interpret .pagein commands parameters
|
2023-07-13 16:05:42 +09:00 |
|
Sinaei
|
2b54f993f7
|
change exception page-fault error code
|
2023-07-13 13:51:35 +09:00 |
|
Sinaei
|
956963bfd1
|
change break and retuns of script engine
|
2023-07-12 21:09:14 +09:00 |
|
Sinaei
|
de39860a0f
|
change .pagein help command
|
2023-07-12 17:12:32 +09:00 |
|
Sinaei
|
a3e9757502
|
fix to process creation and page-fault delivery
|
2023-07-11 20:02:25 +09:00 |
|
Sinaei
|
4556e3fcd4
|
add breakpoint in case of reaching to entrypoint
|
2023-07-10 20:00:07 +09:00 |
|
Sinaei
|
1c08354453
|
initial support for monitor RWX
|
2023-07-07 01:21:07 +09:00 |
|
Sinaei
|
eb1f208819
|
add debug message for crash recovery
|
2023-06-28 22:07:07 +09:00 |
|
Sinaei
|
4c2d628a95
|
fix constant test variables
|
2023-06-08 21:59:06 +09:00 |
|
Sinaei
|
31722397d5
|
add sc on and off to the events
|
2023-06-07 19:24:47 +09:00 |
|
Sinaei
|
cf4a55fd47
|
add disassemble_len and disassemble_len32 functions
|
2023-06-06 22:46:03 +09:00 |
|
unknown
|
4194880a2e
|
fix callstack command invalid address check
|
2023-05-30 20:23:24 +09:00 |
|
unknown
|
c4813f4563
|
fix register view of the track extension command
|
2023-05-22 23:26:22 +09:00 |
|
unknown
|
2251ea5973
|
add breakpoint manipulation interception mechanism
|
2023-05-22 20:52:34 +09:00 |
|
unknown
|
935b7d56c3
|
fix track comment loosing control
|
2023-05-21 00:28:32 +09:00 |
|
unknown
|
2ef9d60345
|
add EAX index to the optional parameters of CPUID extension
|
2023-05-11 17:55:47 +09:00 |
|
unknown
|
cee7065d2f
|
add warnings for using track command without symbols
|
2023-05-09 22:53:45 +09:00 |
|
unknown
|
746320b359
|
add tree view for function tracking mechanism
|
2023-05-07 02:45:44 +09:00 |
|
unknown
|
51854f1aa9
|
add track command to trace function calls and rets
|
2023-05-05 22:03:00 +09:00 |
|
Behrooz Abbassi
|
9a37067519
|
Update Zydis library to version 4.0.0
|
2023-04-27 12:25:28 -07:00 |
|
unknown
|
b0e0641d09
|
Categorize common functions
|
2023-04-27 18:21:55 +09:00 |
|
unknown
|
544228f24d
|
change SDK creation order to fix initial build errors
|
2023-04-26 15:53:29 +09:00 |
|
unknown
|
d02f56ea12
|
fix unhandled stack growth on receiving buffer
|
2023-04-25 18:53:23 +09:00 |
|
unknown
|
6b31ddc9b8
|
fix problem of switching to random processes after user-mode interception
|
2023-03-27 14:18:46 +09:00 |
|
unknown
|
d55a2dae84
|
make changes for execute-only EPT page table
|
2023-03-24 23:05:10 +09:00 |
|
unknown
|
84a5651ece
|
add execute-only EPT page-tables
|
2023-03-24 20:19:00 +09:00 |
|
unknown
|
2358accfaa
|
add ioctl for mode based hooks
|
2023-03-23 18:42:33 +09:00 |
|
unknown
|
9d2b92d2f8
|
reformat files with wrong shape
|
2023-03-22 17:45:52 +09:00 |
|
unknown
|
ed6637b6ac
|
fix process attaching issues
|
2023-03-15 15:31:27 +09:00 |
|
unknown
|
91a5ddb426
|
final refactor to PML codes
|
2023-03-14 15:13:19 +09:00 |
|
unknown
|
4c09327598
|
apply fixed range number for external VMCALLs
|
2023-02-02 21:28:19 +09:00 |
|
unknown
|
0f8f55deb3
|
connecting hyperlog to the rev module
|
2023-02-02 19:41:32 +09:00 |
|
unknown
|
4f654aa48c
|
create driver handling routines for rev module
|
2023-02-02 16:02:16 +09:00 |
|
unknown
|
3a07d8838a
|
link hprdbgrev to hprdbgctrl
|
2023-02-02 14:58:23 +09:00 |
|
unknown
|
44aa551a01
|
importing SDK in the rev module
|
2023-02-02 12:48:15 +09:00 |
|
unknown
|
08caab689b
|
add hprdbgctrlrm module
|
2023-02-01 22:01:46 +09:00 |
|
unknown
|
6b771a7a72
|
initialize the hprdbgrm module
|
2023-01-29 22:51:20 +09:00 |
|
unknown
|
426143425b
|
standardized triggering events
|
2023-01-29 04:06:01 +09:00 |
|
unknown
|
59e4004f98
|
reform the tree structure of kd source files and add ia32 headers to the kd
|
2023-01-22 21:40:30 +09:00 |
|