1
I Use This!
Inactive

Commits : Listings

Analyzed about 6 hours ago. based on code collected about 15 hours ago.
May 03, 2023 — May 03, 2024
Commit Message Contributor Files Modified Lines Added Lines Removed Code Location Date
added root file thingy and driver file stuff to file blacklist More... over 11 years ago
fixed type in file path More... over 11 years ago
added file blacklist for createfile/openfile routines More... over 11 years ago
we are not interested in moved/copied files More... over 11 years ago
simple file blacklist api testing More... over 11 years ago
implemented basic file blacklist api More... over 11 years ago
fixed inconsistent return values part two More... over 11 years ago
fix for functions inlined into kernelbase.dll on win7 More... over 11 years ago
fixed up inconsistent return values More... over 11 years ago
added disable_sleep_skip calls to relevant functions More... over 11 years ago
fixed 64-bit vs 32-bit integer issue More... over 11 years ago
added gettickcount, ntquerysystemtime hooks and skipped sleep log entries More... over 11 years ago
initial work on skipping Sleep calls, also credits to marc More... over 11 years ago
hooking test compiles again, not like it will work as well.. but oh well.. More... over 11 years ago
renamed callgate to trampoline, added backup for registers for exception handling More... over 11 years ago
added x format specifier for pipe, just in case More... over 11 years ago
apparently ensure_client_id was lost More... over 11 years ago
added rtlcreateuserthread hook More... over 11 years ago
dump files with standard_rights_all, log desiredaccess in hex, log shareaccess More... over 11 years ago
pid and pidtid commands are now merged into the process command More... over 11 years ago
process injection now works correctly, due to apc More... over 11 years ago
initialize cuckoomon entirely before notifying the event More... over 11 years ago
createprocessinternalw now uses the apc injection method More... over 11 years ago
small modifications to the comments of the delete-file poc More... over 11 years ago
Merge branch 'dev_36' into development More... over 11 years ago
fixed invalid format string for process identifier More... over 11 years ago
merged protected process stuff into development More... over 11 years ago
added hardcoded open protected process poc More... over 11 years ago
zwopenprocess now actually logs the process identifier.. More... over 11 years ago
added logging also for zwopenprocess calls on protected pids More... over 11 years ago