vrr/kdmapper
2
0
Fork 0
mirror of https://github.com/TheCruZ/kdmapper.git synced 2026-07-10 01:30:04 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
171 commits 2 branches 0 tags 1.7 MiB
Commit graph

171 commits

This branch
This branch
All branches
Author SHA1 Message Date
TheCruZ
280f65733d
Merge pull request #224 from lucifer846/g_HashCacheLockOffset-check-fix 
fixed g_HashCacheLockOffset check
 2026-03-21 09:24:20 +01:00
Moni
9736eb9de4
fixed g_HashCacheLockOffset check 
previously the check was for g_KernelHashBucketListOffset but should have been for g_HashCacheLockOffset , this prevents kdmapper failing in case g_HasCacheLockOffset is null
 2026-03-21 13:17:59 +05:30
TheCruZ
9892b48e30 Clarify 2025-12-23 01:36:45 +01:00
TheCruZ
62aee31bed Fix MmFreeIndependentPages pattern 2025-12-23 01:35:33 +01:00
TheCruZ
4b80ef3f76 No sense on double release attempt 2025-11-15 13:52:55 +01:00
TheCruZ
d67c70021f Fix if check 2025-11-15 13:44:43 +01:00
TheCruZ
bb3c546474 Cleanup registry service on failed loads 2025-10-24 13:08:41 +02:00
TheCruZ
a6808c7bdc More info for failed loads and fix Log/Utils collision on other projects 2025-10-21 10:25:25 +02:00
TheCruZ
833a684bf9
Update README.MD 2025-10-20 12:03:38 +02:00
TheCruZ
f929de1225 Fix code warnings 2025-08-18 11:27:50 +02:00
TheCruZ
d62edaf0e7
Merge pull request #203 from tihomirocrew/master 
Refactor driver API
 2025-08-17 20:02:55 +02:00
tihomirocrew
3b62d2f9d0 Refactor driver API 
- Removed device_handle parameter from all API functions
- Functions now use the hDevice handle declared in intel_driver namespace
- Improved readability and simplified API usage
 2025-08-16 23:07:40 +03:00
TheCruZ
75b8896ece
Update README.MD 2025-08-16 20:30:53 +02:00
TheCruZ
a4c3135dc9
Merge pull request #202 from tihomirocrew/master 
Refactor status code handling to use NTSTATUS constants
 2025-08-16 20:28:05 +02:00
tihomirocrew
1a46ed3f42 Refactor status code handling to use NTSTATUS constants 
- Replaced hardcoded NTSTATUS values with descriptive constants from <ntstatus.h>
- Added safe include for <ntstatus.h> with macro redefinition warning disabled
- Improved readability and maintainability by avoiding magic numbers
 2025-08-16 21:20:51 +03:00
TheCruZ
4780627c9c
Merge pull request #201 from tihomirocrew/master 
Runtime driver timestamp
 2025-08-16 00:49:22 +02:00
tihomirocrew
216de3bb42 Runtime driver timestamp 
Replaced hardcoded iqvw64e_timestamp with a runtime timestamp
retrieved from the vulnerable driver's NT headers to avoid
manual updates when the driver binary changes.
 2025-08-15 02:46:42 +03:00
TheCruZ
a7ff70ce70
Merge pull request #198 from werw58/master 
Detection vector fix: RWX allocation removed
 2025-08-12 13:03:45 +02:00
werw58
0ac7d11914 Set default section prot to READONLY, add empty section check 
Use READONLY instead of NOACCESS for default section prot, skip empty sections
 2025-08-12 10:58:51 +02:00
werw58
b24c30f26c Detection vector fix: RWX allocation removed 
Removed global RWX protection applied after MmAllocateIndependentPages. Implemented per-section protection logic matching PE section characteristics to avoid long-lived RWX memory regions, minimizing behavioral detection vectors.
 2025-08-10 18:00:23 +02:00
TheCruZ
8fa94ff288
Update README.MD 2025-08-06 09:00:07 +02:00
TheCruZ
9ae7fe50f2 Adjust patterns for WDFilter 2025-07-14 14:33:02 +02:00
TheCruZ
c43926c400
Merge pull request #190 from Aeterts/master 
Update KDSymbolsHandler.cpp
 2025-07-14 13:42:06 +02:00
Aeterts
da466981dd Update README.MD 2025-07-13 11:21:38 +03:00
Aeterts
8362fc6b7f Update KDSymbolsHandler.cpp 
- Changed variable 'std::string cmd' -> 'std::wstring cmdW'.
- Changed function call 'system()' -> '_wsystem()'. This allows to use spaces and non-ASCII symbols in .exe path
 2025-07-12 21:27:27 +03:00
TheCruZ
03a511da78 Fix example build 2025-05-21 03:29:13 +02:00
TheCruZ
7bdefced12 Extra message to help users 2025-05-15 01:01:27 +02:00
TheCruZ
57e9686a8c
Update README.MD 2025-05-12 15:38:48 +02:00
TheCruZ
d8bea098e4
Update README.MD 2025-05-12 15:37:52 +02:00
TheCruZ
0681f523a1
Update README.MD 2025-04-30 10:30:49 +02:00
TheCruZ
830901bab1
Merge pull request #182 from KING-UTKARSH/master 
Added WdFilter.sys in PDB offsets
 2025-04-30 10:24:56 +02:00
UTKARSH
b6af1ea92a Added WdFilter.sys in PDB offsets 2025-04-29 18:41:00 +05:30
UTKARSH
6bf9c2bd3a Added WdFilter.sys driver and its symbols 2025-04-29 18:30:35 +05:30
TheCruZ
073c74c620 Readme update 2025-03-17 16:46:59 +01:00
TheCruZ
4cd7e56dce Little project cleanup 2025-03-17 16:35:57 +01:00
TheCruZ
83c0295a1c copy-header param added 2025-03-17 12:40:46 +01:00
TheCruZ
93d7e3ed6e
Merge pull request #179 from Mohi-eddine/Offsets-From-PDB 
PDB offsets update and bug fix
 2025-03-17 09:00:30 +01:00
Mohi-eddine
719017328a - Excluding WdFilter.sys from PDB offsets 
- fixing MmFreeIndependentPages bug
 2025-03-17 00:56:16 +01:00
TheCruZ
19e12cf63a Symbols refactor... 2025-02-09 03:44:30 +01:00
TheCruZ
c50e8dfaea Merge pull request #166 from TheCruZ/pdb-offsets 
Pdb offsets
 2025-01-10 00:34:56 +01:00
TheCruZ
2c98eb1165 PDB Offset PR adjustments 2025-01-10 00:30:07 +01:00
Mohi-eddine
ae753c5df1 Major Code Update 2024-12-19 20:36:19 +01:00
Mohi-eddine
4fc1a485ed corrected a typo error 2024-12-17 23:31:19 +01:00
Mohi-eddine
176e83b29f enabled PDB_OFFSETS and cleaned code 2024-12-15 22:10:18 +01:00
Mohi-eddine
3c9b452827 brought back the original method of getting kernel functions addresses for compatibility 
(use "#define PDB_OFFSETS" to enable the method )
 2024-12-15 20:52:48 +01:00
Mohi-eddine
48ad5d1948 minor changes 2024-12-14 17:56:56 +01:00
Mohi-eddine
2ebf3d047e minor changes 2024-12-14 17:56:20 +01:00
Mohi-eddine
84e2a26ec1 added symbols handler 2024-12-14 16:06:01 +01:00
Mohi-eddine
f6ebca935f symbols from .pdb file 2024-12-14 16:04:15 +01:00
TheCruZ
74e33e2925
Update README.MD 2024-10-07 19:44:39 +02:00