86 commits

Author	SHA1	Message	Date
sina	945ae55563	check for EPT hooks above 512 GB	2025-07-22 01:21:11 +02:00
sina	fdd5dfc55e	fix shifting correct number of bytes on the PML3 PFN	2025-07-21 02:30:11 +02:00
sina	24d9a93531	set out of range MMIO ranges as uncacheable	2025-07-21 01:43:24 +02:00
sina	369908f64c	add support for extra reserved addresses for out of 512 GB range MMIO addresses	2025-07-21 01:14:39 +02:00
sina	3c92e09a51	fix crash on using TPAUSE instruction on Windows 11 24h2	2025-07-19 17:53:06 +02:00
sina	3d73a95b8f	check for uninitializing memory pools for the debugger	2025-07-15 00:02:11 +02:00
sina	891382fa50	check the accessibility of address based on process id	2025-07-09 23:49:12 +02:00
sina	7ae6ad8e37	added kernel side support for putting breakpoint in the user debugger	2025-07-09 22:38:36 +02:00
sina	15061014c7	Fixed retrieving valid watching process IDs for the execution trap and user-mode execution prevention	2025-07-08 19:41:08 +02:00
sina	0e5ff45c30	set user mode execute bit for different core EPTPs	2025-07-08 00:10:43 +02:00
sina	e8e0489a6b	fix removing process from pausing list	2025-06-29 20:22:51 +02:00
sina	d6f0e22928	intercept the execution when the module loaded on the user debugger	2025-06-28 18:53:35 +02:00
sina	8aa8289236	adjust mbec and user debugger initialization	2025-06-28 04:28:39 +02:00
sina	a93b78dfad	use the same EPTP for MBEC	2025-06-28 03:54:07 +02:00
sina	2637965512	apply user mode debugger to the kernel debugger	2025-06-26 19:14:29 +02:00
sina	fe4dd107cb	add hyperdbg test mode for the user debugger	2025-06-25 18:48:11 +02:00
sina	cc8167c089	only apply thread interception to user mode	2025-06-24 18:12:02 +02:00
sina	6893c1b19f	change user debugger from supervisor bit of regular page table to mbec	2025-06-21 02:59:44 +02:00
sina	e7a7668325	get process name and process id for the transparent mode	2025-06-11 01:43:19 +02:00
sina	0e649c6107	check for race condition while configuring the transparent mode	2025-06-10 23:59:21 +02:00
sina	7df82a1b5a	make separate msr read, msr write and trap flag handling	2025-06-08 10:07:19 +02:00
sina	17914a34c7	separate vmx and syscall footprints	2025-06-08 09:28:56 +02:00
sina	bba0bd2a4c	fix changes from transparent-mode to syscall callback	2025-06-08 08:58:40 +02:00
sina	bdfd1f30eb	change the syscall callback initialization scope	2025-06-08 00:06:52 +02:00
sina	664e84a14f	fixing compilation errors and add hyperevade callbacks	2025-06-07 23:57:04 +02:00
sina	872947677e	link hyperevade to hyperhv	2025-06-07 21:57:57 +02:00
sina	afd5879bd2	move transparency functions to hyperevade	2025-06-07 20:17:05 +02:00
sina	29d9dc684e	fill the system-calls from user-mode	2025-06-07 00:09:27 +02:00
sina	1eb9606073	add dynamic system call numbers for transparent mode	2025-06-06 23:01:29 +02:00
Sina Karvandi	d0610661ba	Merge pull request #521 from CokeTree3/SysCall-transparency ... Windows system call transparency	2025-06-06 22:01:04 +02:00
sina	04e3e1e6f5	update versioning and changelog	2025-06-04 20:10:20 +02:00
unknown	0d5ee6ab60	implement microsleep function	2025-06-02 11:26:48 +02:00
CokeTree3	0f0bddea48	Merge branch 'HyperDbg:master' into SysCall-transparency	2025-05-30 12:57:06 +02:00
CokeTree3	c70152f916	Comment fix	2025-05-30 12:56:21 +02:00
CokeTree3	d44e2ff219	Small fix	2025-05-30 12:28:50 +02:00
CokeTree3	b86a2e2d64	Bugfixes and readability improvements	2025-05-30 12:26:30 +02:00
sina	b77a42d761	Fixed VMCS layout corruption due to NMI injection on Meteor Lake	2025-05-24 06:26:28 +02:00
CokeTree3	b6e52d6d77	Added a per transparency mode execution, genuine vendor string randomization	2025-05-17 15:04:04 +02:00
CokeTree3	269c503863	Memory managment and variable name improvements	2025-05-16 18:02:26 +02:00
CokeTree3	84ad024f9b	NtQueryValueKey and NtEnumerateKey syscall transparent mitigations	2025-05-16 17:42:52 +02:00
CokeTree3	d11f3934cb	Registry access related systemcall transparency	2025-05-10 22:14:26 +02:00
CokeTree3	cc8d49cf94	File access related systemcall transparent mitigations	2025-05-09 20:47:11 +02:00
CokeTree3	0dc676b3d5	NtQueryAttributesFile and NtOpenDirectoryObject system call handling	2025-05-07 12:06:04 +02:00
CokeTree3	80820e21d3	Syscall NtQuerySystemInformation transparency	2025-05-06 17:16:45 +02:00
CokeTree3	a443283a71	SystemCall handler hooking	2025-05-04 20:50:34 +02:00
Sina Karvandi	2cc3da3dae	Merge pull request #518 from CokeTree3/MSR-transparency ... MSR transparency features	2025-05-04 18:12:22 +02:00
sina	0512b40ed1	add optional parameters for the transparent mode syscalls	2025-05-04 13:41:07 +02:00
sina	a8e3cf55e1	add context to the syscall interceptor	2025-04-30 20:52:04 +02:00
sina	b9433b3b33	set trap flags for the syscall in the transparent mode	2025-04-30 19:47:58 +02:00
CokeTree3	45da065bf6	MSR read and write handling in transparency mode	2025-04-28 11:56:48 +02:00