joaoviictorti
acec7aeed2
feat(driver): adding new port module
2024-09-26 21:27:26 -03:00
joaoviictorti
89bb5fc9c5
refactor(cliente): rename variables for better readability
2024-09-26 21:08:25 -03:00
joaoviictorti
8084118ae7
fix(driver): Remove KeUnstackDetachProcess
2024-09-25 20:17:26 -03:00
joaoviictorti
9827365eba
docs(driver): Minor correction to function documentation
2024-09-25 18:34:07 -03:00
joaoviictorti
8f96d4ec09
feature(driver): refactor internals and improve callback management
...
- Moved and refactored several internal modules to `driver/src/internals/`:
- Added new files: `enums.rs`, `externs.rs`, `structs.rs`, `types.rs`, and `mod.rs`.
- Renamed `includes/vad.rs` to `internals/vad.rs` for better organization.
- Updated `callback` module:
- Refactored `notify_routine.rs`, `object.rs`, `registry.rs`, and supporting files for better callback handling.
- Improved callback finding mechanism in `find_callback.rs` and `ioctls.rs`.
- Adjusted `injection` module:
- Refactored callback and I/O control handling in `callbacks.rs` and `ioctls.rs`.
- Miscellaneous improvements:
- Updated `misc/dse.rs`, `misc/etwti.rs`, and `keylogger/mod.rs`.
- Refactored `process`, `registry`, and `thread` modules for better maintainability.
- Simplified utility functions in `utils/`, including `address.rs`, `handles.rs`, `patterns.rs`, and more.
- Cleaned up and removed unused files like `.gitignore` in multiple directories.
- Updated `Cargo.toml` and `Cargo.lock` to reflect dependency changes.
2024-09-25 18:28:10 -03:00
joaoviictorti
74f1a3559e
Add .cargo folder
2024-09-23 14:13:12 -03:00
joaoviictorti
f13c190c5f
docs: Updating utils module documentation
2024-09-23 13:45:00 -03:00
joaoviictorti
0617345acb
Remove module port
2024-09-17 11:00:30 -03:00
joaoviictorti
03db0a8f82
Moving DSE functionality to the misc module
2024-09-17 10:59:15 -03:00
joaoviictorti
890f288af4
feat: Refactor code to add ETWTI functionality and remove duplication, integrating scan_for_pattern for optimization
2024-09-16 23:46:56 -03:00
João Victor
08d3bbf4e1
Splitting callbacks into files
2024-09-08 01:14:54 -03:00
João Victor
3b90007565
Small Fix
2024-09-08 00:22:38 -03:00
João Victor
d44c7d1f5b
Remove file vad.rs
2024-09-08 00:06:21 -03:00
João Victor
e84b38c7d0
Add ProcessAttach struct to manage process context switching
2024-09-07 23:57:18 -03:00
João Victor
4828108358
Renaming structure to Hide Object
2024-09-07 23:40:11 -03:00
João Victor
7330488d31
Adding new features to the 'Module' and refactoring the code
2024-09-07 23:33:18 -03:00
João Victor
61108252eb
Small fix
2024-08-31 13:13:25 -03:00
João Victor
351a7d5fea
Complete refactoring of driver and client code to improve readability
2024-08-31 00:35:00 -03:00
João Victor
f2083e66f7
Adding the rest of the registry function files
2024-08-11 22:04:55 -03:00
João Victor
2bf8a4fa53
Adding new registry key/value hiding features
2024-08-11 22:04:08 -03:00
João Victor
5acc26f955
Removing the search for the ZwProtectVirtualMemory api and calling it externally
2024-08-08 13:48:47 -03:00
João Victor
3fa6c3bd1c
Update .gitignore
2024-08-08 13:46:44 -03:00
João Victor
2834d59846
Small fix
2024-08-08 00:44:29 -03:00
João Victor
cf2e2d8eea
Small correction to the mapping of ntdll.dll
2024-08-08 00:43:00 -03:00
João Victor
3863b172d9
Small fix
2024-08-05 21:47:32 -03:00
João Victor
04eb90ed0b
Changing an IoCreateDriver parameter
2024-08-05 21:45:57 -03:00
João Victor
bbbaa0a3ad
Small fix
2024-08-05 21:41:55 -03:00
João Victor
d924116219
Small fix
2024-08-05 21:41:16 -03:00
João Victor
0bcdf6b443
Adding DLL injection functionality
2024-08-05 21:35:29 -03:00
João
c20d85ce25
Small fix
2024-08-04 18:13:20 -03:00
João
21491ac268
Adding new features in relation to callbacks and refactoring some other parts of the code
2024-08-04 17:58:02 -03:00
João
cc722869d1
Removing ExAllocatePool due to discontinuation and adding ExAllocatePool2
2024-07-31 12:05:11 -03:00
João
2c16fa16c9
Updating log messages
2024-07-30 22:12:37 -03:00
João
1a00204e9a
Removing the memory module import
2024-07-30 22:11:26 -03:00
João
331887c01a
Updating documentation
2024-07-30 22:10:37 -03:00
João
a8a9af8006
Update code lib
2024-07-30 22:08:32 -03:00
João
4a337255c7
Alertable thread search functionality
2024-07-30 22:07:17 -03:00
João
428fcc72a8
Adding new IOCTLS
2024-07-30 22:03:25 -03:00
João
bd2645c180
Adjusting imports
2024-07-30 22:02:17 -03:00
João
a72dc000d4
Adding Injection using APCS
2024-07-30 22:00:48 -03:00
João
80f7b443fe
Changing the variable name
2024-07-27 23:11:14 -03:00
João
bfb08aab3a
Readjusting comments
2024-07-27 17:23:22 -03:00
João
47a42d52f7
update Makefile.toml
2024-07-27 10:17:20 -03:00
João
a8eb0d637c
Adding the ZwProtectVirtualMemory type
2024-07-26 22:11:09 -03:00
João
a0f95571d3
Readjusting comments
2024-07-26 22:09:44 -03:00
João
f3f07d1af1
Adding comments to the remaining functions
2024-07-26 22:06:40 -03:00
João
5ec1126e0a
Refactoring code
2024-07-26 20:54:38 -03:00
João
ab01305e97
Changing the type of page protection when writing to the thread
2024-07-26 20:18:41 -03:00
João
8d4611484b
Removing unnecessary code
2024-07-26 20:05:25 -03:00
João
03e6911cf5
Refactoring object initialization
2024-07-26 20:02:27 -03:00