Commit Graph

71 Commits

Author SHA1 Message Date
joaoviictorti
68dd3a3506 fix: Fixing error when using feature mapper 2024-11-09 21:40:54 -03:00
joaoviictorti
3e51fe4c11 refactor: Refactoring all code to improve documentation and operation of the kernel driver
- Updating module documentation
- Adding new features
- Refactoring all code to improve readability
2024-11-01 13:26:50 -03:00
joaoviictorti
ead1323eb6 docs(driver): Renaming to 'Returns' 2024-10-04 11:15:55 -03:00
joaoviictorti
9387771c81 docs(driver): Adjusts documentation to use 'Arguments' instead of 'Parameters' 2024-10-04 11:12:11 -03:00
joaoviictorti
27e8a2a1a4 docs(driver): Updating documentation for the get_gafasynckeystate_address function 2024-09-28 11:29:37 -03:00
joaoviictorti
1ce372ccef refactor(driver): Removing unused variables 2024-09-28 11:19:33 -03:00
joaoviictorti
dba99af52b fix(driver): resolving a comparison error between process modules 2024-09-27 21:22:55 -03:00
joaoviictorti
0733f7b6cd refactor(driver): replace get_gafasynckeystate_address with get_function_address
- Removed the `get_gafasynckeystate_address` function and replaced its usage with `get_function_address`.
- Simplified the key state address retrieval process, improving code maintainability and reducing redundancy.
2024-09-27 21:17:27 -03:00
joaoviictorti
52d8e2bb86 refactor(driver): remove unnecessary arguments and simplify key state address retrieval
- Removed PEPROCESS from `get_gafasynckeystate_address` as it's no longer needed.
- Simplified the flow in `get_user_address_keylogger` by attaching to the process before retrieving the key state address.
- General code cleanup and refactoring to improve readability and maintainability.
2024-09-27 21:13:22 -03:00
joaoviictorti
990af53343 docs: add documentation for get_windows_build_number function
- Added concise documentation for the `get_windows_build_number` function, explaining its purpose, return value, and safety considerations.
2024-09-27 21:08:42 -03:00
joaoviictorti
f71555748c feature(driver): remove loop/thread for key state reading, added VAD root offset retrieval
- Removed the loop and thread for reading key states; now the client handles this, as the driver maps the address to user mode.
- Added a function to retrieve the VAD root offset.
- Refactored various parts of the code for clarity and performance.
2024-09-27 21:02:48 -03:00
joaoviictorti
2257cd82f6 fix: add missing thread termination protection when mapper feature is disabled 2024-09-26 21:39:14 -03:00
joaoviictorti
e518a17482 refactor(driver): removing log messages 2024-09-26 21:32:45 -03:00
joaoviictorti
acec7aeed2 feat(driver): adding new port module 2024-09-26 21:27:26 -03:00
joaoviictorti
89bb5fc9c5 refactor(cliente): rename variables for better readability 2024-09-26 21:08:25 -03:00
joaoviictorti
8084118ae7 fix(driver): Remove KeUnstackDetachProcess 2024-09-25 20:17:26 -03:00
joaoviictorti
9827365eba docs(driver): Minor correction to function documentation 2024-09-25 18:34:07 -03:00
joaoviictorti
8f96d4ec09 feature(driver): refactor internals and improve callback management
- Moved and refactored several internal modules to `driver/src/internals/`:
  - Added new files: `enums.rs`, `externs.rs`, `structs.rs`, `types.rs`, and `mod.rs`.
  - Renamed `includes/vad.rs` to `internals/vad.rs` for better organization.
- Updated `callback` module:
  - Refactored `notify_routine.rs`, `object.rs`, `registry.rs`, and supporting files for better callback handling.
  - Improved callback finding mechanism in `find_callback.rs` and `ioctls.rs`.
- Adjusted `injection` module:
  - Refactored callback and I/O control handling in `callbacks.rs` and `ioctls.rs`.
- Miscellaneous improvements:
  - Updated `misc/dse.rs`, `misc/etwti.rs`, and `keylogger/mod.rs`.
  - Refactored `process`, `registry`, and `thread` modules for better maintainability.
  - Simplified utility functions in `utils/`, including `address.rs`, `handles.rs`, `patterns.rs`, and more.
  - Cleaned up and removed unused files like `.gitignore` in multiple directories.
- Updated `Cargo.toml` and `Cargo.lock` to reflect dependency changes.
2024-09-25 18:28:10 -03:00
joaoviictorti
74f1a3559e Add .cargo folder 2024-09-23 14:13:12 -03:00
joaoviictorti
f13c190c5f docs: Updating utils module documentation 2024-09-23 13:45:00 -03:00
joaoviictorti
0617345acb Remove module port 2024-09-17 11:00:30 -03:00
joaoviictorti
03db0a8f82 Moving DSE functionality to the misc module 2024-09-17 10:59:15 -03:00
joaoviictorti
890f288af4 feat: Refactor code to add ETWTI functionality and remove duplication, integrating scan_for_pattern for optimization 2024-09-16 23:46:56 -03:00
João Victor
08d3bbf4e1 Splitting callbacks into files 2024-09-08 01:14:54 -03:00
João Victor
3b90007565 Small Fix 2024-09-08 00:22:38 -03:00
João Victor
d44c7d1f5b Remove file vad.rs 2024-09-08 00:06:21 -03:00
João Victor
e84b38c7d0 Add ProcessAttach struct to manage process context switching 2024-09-07 23:57:18 -03:00
João Victor
4828108358 Renaming structure to Hide Object 2024-09-07 23:40:11 -03:00
João Victor
7330488d31 Adding new features to the 'Module' and refactoring the code 2024-09-07 23:33:18 -03:00
João Victor
61108252eb Small fix 2024-08-31 13:13:25 -03:00
João Victor
351a7d5fea Complete refactoring of driver and client code to improve readability 2024-08-31 00:35:00 -03:00
João Victor
f2083e66f7 Adding the rest of the registry function files 2024-08-11 22:04:55 -03:00
João Victor
2bf8a4fa53 Adding new registry key/value hiding features 2024-08-11 22:04:08 -03:00
João Victor
5acc26f955 Removing the search for the ZwProtectVirtualMemory api and calling it externally 2024-08-08 13:48:47 -03:00
João Victor
3fa6c3bd1c Update .gitignore 2024-08-08 13:46:44 -03:00
João Victor
2834d59846 Small fix 2024-08-08 00:44:29 -03:00
João Victor
cf2e2d8eea Small correction to the mapping of ntdll.dll 2024-08-08 00:43:00 -03:00
João Victor
3863b172d9 Small fix 2024-08-05 21:47:32 -03:00
João Victor
04eb90ed0b Changing an IoCreateDriver parameter 2024-08-05 21:45:57 -03:00
João Victor
bbbaa0a3ad Small fix 2024-08-05 21:41:55 -03:00
João Victor
d924116219 Small fix 2024-08-05 21:41:16 -03:00
João Victor
0bcdf6b443 Adding DLL injection functionality 2024-08-05 21:35:29 -03:00
João
c20d85ce25 Small fix 2024-08-04 18:13:20 -03:00
João
21491ac268 Adding new features in relation to callbacks and refactoring some other parts of the code 2024-08-04 17:58:02 -03:00
João
cc722869d1 Removing ExAllocatePool due to discontinuation and adding ExAllocatePool2 2024-07-31 12:05:11 -03:00
João
2c16fa16c9 Updating log messages 2024-07-30 22:12:37 -03:00
João
1a00204e9a Removing the memory module import 2024-07-30 22:11:26 -03:00
João
331887c01a Updating documentation 2024-07-30 22:10:37 -03:00
João
a8a9af8006 Update code lib 2024-07-30 22:08:32 -03:00
João
4a337255c7 Alertable thread search functionality 2024-07-30 22:07:17 -03:00