sina
|
bdfd1f30eb
|
change the syscall callback initialization scope
|
2025-06-08 00:06:52 +02:00 |
|
sina
|
664e84a14f
|
fixing compilation errors and add hyperevade callbacks
|
2025-06-07 23:57:04 +02:00 |
|
sina
|
872947677e
|
link hyperevade to hyperhv
|
2025-06-07 21:57:57 +02:00 |
|
sina
|
afd5879bd2
|
move transparency functions to hyperevade
|
2025-06-07 20:17:05 +02:00 |
|
sina
|
29d9dc684e
|
fill the system-calls from user-mode
|
2025-06-07 00:09:27 +02:00 |
|
sina
|
1eb9606073
|
add dynamic system call numbers for transparent mode
|
2025-06-06 23:01:29 +02:00 |
|
Sina Karvandi
|
d0610661ba
|
Merge pull request #521 from CokeTree3/SysCall-transparency
Windows system call transparency
|
2025-06-06 22:01:04 +02:00 |
|
sina
|
04e3e1e6f5
|
update versioning and changelog
|
2025-06-04 20:10:20 +02:00 |
|
unknown
|
0d5ee6ab60
|
implement microsleep function
|
2025-06-02 11:26:48 +02:00 |
|
CokeTree3
|
0f0bddea48
|
Merge branch 'HyperDbg:master' into SysCall-transparency
|
2025-05-30 12:57:06 +02:00 |
|
CokeTree3
|
c70152f916
|
Comment fix
|
2025-05-30 12:56:21 +02:00 |
|
CokeTree3
|
d44e2ff219
|
Small fix
|
2025-05-30 12:28:50 +02:00 |
|
CokeTree3
|
b86a2e2d64
|
Bugfixes and readability improvements
|
2025-05-30 12:26:30 +02:00 |
|
sina
|
b77a42d761
|
Fixed VMCS layout corruption due to NMI injection on Meteor Lake
|
2025-05-24 06:26:28 +02:00 |
|
CokeTree3
|
b6e52d6d77
|
Added a per transparency mode execution, genuine vendor string randomization
|
2025-05-17 15:04:04 +02:00 |
|
CokeTree3
|
269c503863
|
Memory managment and variable name improvements
|
2025-05-16 18:02:26 +02:00 |
|
CokeTree3
|
84ad024f9b
|
NtQueryValueKey and NtEnumerateKey syscall transparent mitigations
|
2025-05-16 17:42:52 +02:00 |
|
CokeTree3
|
d11f3934cb
|
Registry access related systemcall transparency
|
2025-05-10 22:14:26 +02:00 |
|
CokeTree3
|
cc8d49cf94
|
File access related systemcall transparent mitigations
|
2025-05-09 20:47:11 +02:00 |
|
CokeTree3
|
0dc676b3d5
|
NtQueryAttributesFile and NtOpenDirectoryObject system call handling
|
2025-05-07 12:06:04 +02:00 |
|
CokeTree3
|
80820e21d3
|
Syscall NtQuerySystemInformation transparency
|
2025-05-06 17:16:45 +02:00 |
|
CokeTree3
|
a443283a71
|
SystemCall handler hooking
|
2025-05-04 20:50:34 +02:00 |
|
Sina Karvandi
|
2cc3da3dae
|
Merge pull request #518 from CokeTree3/MSR-transparency
MSR transparency features
|
2025-05-04 18:12:22 +02:00 |
|
sina
|
0512b40ed1
|
add optional parameters for the transparent mode syscalls
|
2025-05-04 13:41:07 +02:00 |
|
sina
|
a8e3cf55e1
|
add context to the syscall interceptor
|
2025-04-30 20:52:04 +02:00 |
|
sina
|
b9433b3b33
|
set trap flags for the syscall in the transparent mode
|
2025-04-30 19:47:58 +02:00 |
|
CokeTree3
|
45da065bf6
|
MSR read and write handling in transparency mode
|
2025-04-28 11:56:48 +02:00 |
|
CokeTree3
|
1037583fd4
|
added CPUID instruction handling in transparency mode
|
2025-04-11 19:40:32 +02:00 |
|
sina
|
289cd60f23
|
add base files for the MMIO shadowing implementation
|
2025-02-25 01:41:14 +01:00 |
|
sina
|
1a1e620b68
|
fix the logging issue for the MSR reads and writes and interrupt logging
|
2025-02-14 19:13:12 +01:00 |
|
sina
|
5c92dca212
|
add logging mechanism for RDMSR and WRMSR
|
2025-02-14 16:48:32 +01:00 |
|
Sina Karvandi
|
ee17e49bfc
|
Merge branch 'dev' into add-pcie-support
|
2025-02-13 17:13:19 +01:00 |
|
sina
|
61a0ae4553
|
fix the issue of reading and writing device memory
|
2025-02-13 16:13:00 +01:00 |
|
Sina Karvandi
|
8682b3c218
|
Merge pull request #500 from HyperDbg/mmio-mem-read
Mmio mem read
|
2025-02-13 13:31:53 +01:00 |
|
Björn Ruytenberg
|
bdb2583383
|
pcicam: Add support for Bridge header type; add initial support for determining BARs and their sizes
|
2025-01-27 16:14:43 +01:00 |
|
SinaKarvandi
|
b7b2b303d8
|
add new description for changing script engine constants
|
2025-01-25 18:37:54 +01:00 |
|
SinaKarvandi
|
36c0302c12
|
fix removing the trace of the hide
|
2025-01-25 16:03:03 +01:00 |
|
SinaKarvandi
|
bea9ae7a93
|
modify the hide and unhide command
|
2025-01-25 02:15:21 +01:00 |
|
Shtan7
|
61567d1ab5
|
Add handling of the trap flag for emulated instructions.
|
2025-01-23 23:56:59 +03:00 |
|
SinaKarvandi
|
0bb3398b30
|
move the idt query functions from debugger to hypervisor
|
2024-12-30 05:04:07 +01:00 |
|
Sina Karvandi
|
fd79e785ae
|
Merge pull request #491 from Shtan7/pull_request_branch
add proper handling for the xsetbv vmexit
|
2024-12-29 21:41:26 +01:00 |
|
Shtan7
|
c5ff96beea
|
add proper handling for the xsetbv vmexit
|
2024-12-29 19:31:29 +03:00 |
|
SinaKarvandi
|
a93d639a78
|
fix PCI CAM reading offset
|
2024-12-11 18:18:29 +01:00 |
|
Björn Ruytenberg
|
453dff9ac4
|
Merge branch 'dev' into add-pcie-support
|
2024-12-02 15:49:27 +01:00 |
|
SinaKarvandi
|
b7043b48ae
|
Add IDT Entries interpreter
|
2024-11-26 11:44:06 +01:00 |
|
SinaKarvandi
|
62535c94da
|
fix overflow error in showing interrupt entries
|
2024-11-20 15:39:21 +01:00 |
|
SinaKarvandi
|
bb9c4e30d7
|
add support for IO APIC
|
2024-11-19 13:56:22 +01:00 |
|
Björn Ruytenberg
|
e714e3e6ad
|
Fix typo
|
2024-11-17 18:50:22 +01:00 |
|
Björn Ruytenberg
|
14a679a8dc
|
Merge branch 'dev' into add-pcie-support
|
2024-11-12 19:18:52 +01:00 |
|
Björn Ruytenberg
|
f0123c8790
|
pcitree: Initial work to add pcitree command
|
2024-11-12 19:14:48 +01:00 |
|