Commit graph

63 commits

Author SHA1 Message Date
sina
bdfd1f30eb
change the syscall callback initialization scope 2025-06-08 00:06:52 +02:00
sina
664e84a14f
fixing compilation errors and add hyperevade callbacks 2025-06-07 23:57:04 +02:00
sina
872947677e
link hyperevade to hyperhv 2025-06-07 21:57:57 +02:00
sina
afd5879bd2
move transparency functions to hyperevade 2025-06-07 20:17:05 +02:00
sina
29d9dc684e
fill the system-calls from user-mode 2025-06-07 00:09:27 +02:00
sina
1eb9606073
add dynamic system call numbers for transparent mode 2025-06-06 23:01:29 +02:00
Sina Karvandi
d0610661ba
Merge pull request #521 from CokeTree3/SysCall-transparency
Windows system call transparency
2025-06-06 22:01:04 +02:00
sina
04e3e1e6f5
update versioning and changelog 2025-06-04 20:10:20 +02:00
unknown
0d5ee6ab60 implement microsleep function 2025-06-02 11:26:48 +02:00
CokeTree3
0f0bddea48
Merge branch 'HyperDbg:master' into SysCall-transparency 2025-05-30 12:57:06 +02:00
CokeTree3
c70152f916 Comment fix 2025-05-30 12:56:21 +02:00
CokeTree3
d44e2ff219 Small fix 2025-05-30 12:28:50 +02:00
CokeTree3
b86a2e2d64 Bugfixes and readability improvements 2025-05-30 12:26:30 +02:00
sina
b77a42d761
Fixed VMCS layout corruption due to NMI injection on Meteor Lake 2025-05-24 06:26:28 +02:00
CokeTree3
b6e52d6d77 Added a per transparency mode execution, genuine vendor string randomization 2025-05-17 15:04:04 +02:00
CokeTree3
269c503863 Memory managment and variable name improvements 2025-05-16 18:02:26 +02:00
CokeTree3
84ad024f9b NtQueryValueKey and NtEnumerateKey syscall transparent mitigations 2025-05-16 17:42:52 +02:00
CokeTree3
d11f3934cb Registry access related systemcall transparency 2025-05-10 22:14:26 +02:00
CokeTree3
cc8d49cf94 File access related systemcall transparent mitigations 2025-05-09 20:47:11 +02:00
CokeTree3
0dc676b3d5 NtQueryAttributesFile and NtOpenDirectoryObject system call handling 2025-05-07 12:06:04 +02:00
CokeTree3
80820e21d3 Syscall NtQuerySystemInformation transparency 2025-05-06 17:16:45 +02:00
CokeTree3
a443283a71 SystemCall handler hooking 2025-05-04 20:50:34 +02:00
Sina Karvandi
2cc3da3dae
Merge pull request #518 from CokeTree3/MSR-transparency
MSR transparency features
2025-05-04 18:12:22 +02:00
sina
0512b40ed1
add optional parameters for the transparent mode syscalls 2025-05-04 13:41:07 +02:00
sina
a8e3cf55e1
add context to the syscall interceptor 2025-04-30 20:52:04 +02:00
sina
b9433b3b33
set trap flags for the syscall in the transparent mode 2025-04-30 19:47:58 +02:00
CokeTree3
45da065bf6 MSR read and write handling in transparency mode 2025-04-28 11:56:48 +02:00
CokeTree3
1037583fd4 added CPUID instruction handling in transparency mode 2025-04-11 19:40:32 +02:00
sina
289cd60f23 add base files for the MMIO shadowing implementation 2025-02-25 01:41:14 +01:00
sina
1a1e620b68 fix the logging issue for the MSR reads and writes and interrupt logging 2025-02-14 19:13:12 +01:00
sina
5c92dca212 add logging mechanism for RDMSR and WRMSR 2025-02-14 16:48:32 +01:00
Sina Karvandi
ee17e49bfc
Merge branch 'dev' into add-pcie-support 2025-02-13 17:13:19 +01:00
sina
61a0ae4553 fix the issue of reading and writing device memory 2025-02-13 16:13:00 +01:00
Sina Karvandi
8682b3c218
Merge pull request #500 from HyperDbg/mmio-mem-read
Mmio mem read
2025-02-13 13:31:53 +01:00
Björn Ruytenberg
bdb2583383 pcicam: Add support for Bridge header type; add initial support for determining BARs and their sizes 2025-01-27 16:14:43 +01:00
SinaKarvandi
b7b2b303d8 add new description for changing script engine constants 2025-01-25 18:37:54 +01:00
SinaKarvandi
36c0302c12 fix removing the trace of the hide 2025-01-25 16:03:03 +01:00
SinaKarvandi
bea9ae7a93 modify the hide and unhide command 2025-01-25 02:15:21 +01:00
Shtan7
61567d1ab5 Add handling of the trap flag for emulated instructions. 2025-01-23 23:56:59 +03:00
SinaKarvandi
0bb3398b30 move the idt query functions from debugger to hypervisor 2024-12-30 05:04:07 +01:00
Sina Karvandi
fd79e785ae
Merge pull request #491 from Shtan7/pull_request_branch
add proper handling for the xsetbv vmexit
2024-12-29 21:41:26 +01:00
Shtan7
c5ff96beea add proper handling for the xsetbv vmexit 2024-12-29 19:31:29 +03:00
SinaKarvandi
a93d639a78 fix PCI CAM reading offset 2024-12-11 18:18:29 +01:00
Björn Ruytenberg
453dff9ac4 Merge branch 'dev' into add-pcie-support 2024-12-02 15:49:27 +01:00
SinaKarvandi
b7043b48ae Add IDT Entries interpreter 2024-11-26 11:44:06 +01:00
SinaKarvandi
62535c94da fix overflow error in showing interrupt entries 2024-11-20 15:39:21 +01:00
SinaKarvandi
bb9c4e30d7 add support for IO APIC 2024-11-19 13:56:22 +01:00
Björn Ruytenberg
e714e3e6ad Fix typo 2024-11-17 18:50:22 +01:00
Björn Ruytenberg
14a679a8dc
Merge branch 'dev' into add-pcie-support 2024-11-12 19:18:52 +01:00
Björn Ruytenberg
f0123c8790 pcitree: Initial work to add pcitree command 2024-11-12 19:14:48 +01:00