Commit graph

  • c69a9ba814
    Merge 4ae4624b76 into baa5c8e853 Ali 2026-02-11 18:32:59 +00:00
  • 4ae4624b76 Fix crash caused by stale hNtdllFile and hNtdllSection handle on NtClose (#172) Ali 2026-02-12 02:23:52 +08:00
  • e63ae9669d Fix crash caused by stale hNtdllFile and hNtdllSection handle on NtClose (#172) Ali 2026-02-11 22:15:42 +08:00
  • a56871fb57
    Merge 58059e28a7 into baa5c8e853 Abbas-MG 2024-08-25 12:03:25 +00:00
  • 58059e28a7
    Update README.md Abbas-MG 2024-08-25 15:33:23 +03:30
  • f3ed6eb889 dependency fix Abbas-MG 2024-08-24 03:48:10 +03:30
  • 1b9d5d554c add new info to avoid bugs Abbas-MG 2024-08-24 03:31:01 +03:30
  • 2c02040700 remove dup var Abbas-MG 2024-08-24 03:05:08 +03:30
  • 69e71a43c4 0x80000003 exception fixe + other Abbas-MG 2024-08-24 02:59:36 +03:30
  • 9a69129e61 EXIT_THREAD_DEBUG_EVENT disabled Abbas-MG 2024-08-24 02:55:50 +03:30
  • bccc813ecf look for new process - make bHook global Abbas-MG 2024-08-24 02:53:06 +03:30
  • a93fc68304 some fixed Abbas-MG 2024-08-24 02:46:02 +03:30
  • 306666271d No process is open message Abbas-MG 2024-08-24 02:42:41 +03:30
  • 1d55b8943d use new features in code Abbas-MG 2024-08-24 02:41:02 +03:30
  • 1162acbfba cloned SyllaHide's inject and removed Suspend from it Abbas-MG 2024-08-24 02:35:23 +03:30
  • 2c5f754838 update fixPeb() Abbas-MG 2024-08-24 02:31:27 +03:30
  • 6da3f82437 update isProcAlive() Abbas-MG 2024-08-24 02:30:53 +03:30
  • 9bcf88455a update showError() Abbas-MG 2024-08-24 02:29:32 +03:30
  • 78c96e3fed nullify inject at Options Dialog Abbas-MG 2024-08-24 02:22:17 +03:30
  • 29bfc8c978 info update Abbas-MG 2024-06-05 01:32:09 +03:30
  • 87a2435ae2 info update Abbas-MG 2024-05-30 03:04:13 +03:30
  • d74d65f2e4 info update Abbas-MG 2024-05-30 03:01:39 +03:30
  • 6afea2bf9b add_CE Abbas-MG 2024-05-30 02:32:19 +03:30
  • 2e5b663f55
    Merge 884c3ce171 into baa5c8e853 Aivan Monceller 2024-02-26 19:54:04 +00:00
  • 884c3ce171 few minor updates to the IDA plugin Duncan Ogilvie 2024-02-26 20:01:16 +01:00
  • e857fc1c1b do not build IDA plugin for 32-bit Duncan Ogilvie 2024-02-26 20:01:16 +01:00
  • 91d59eaaa3 add support for v8.3 ida pro plugin Aivan Monceller 2024-02-12 04:11:07 +08:00
  • e44f263096
    Merge 11d540dd46 into baa5c8e853 Artur Alekseev 2023-11-16 01:55:24 +03:00
  • 11d540dd46 VPM Heaven's Gate Bypass by miketestz Artur Alekseev 2023-11-16 01:49:02 +03:00
  • 589078ced4 the code has become more readable, writeprocessmemory has been replaced with memcpy, memory management has been optimized notcpuid 2023-10-22 01:28:13 +03:00
  • a621fb95b4
    Merge 5f3d97c6cc into baa5c8e853 Artur Alekseev 2023-10-19 23:03:55 +00:00
  • 5f3d97c6cc Revert project files change Artur Alekseev 2023-10-20 02:03:36 +03:00
  • ab469b34c2 Additional change for 32 bit release. Artur Alekseev 2023-09-11 23:43:24 +03:00
  • 93e352a17a Rebase user dll VAs from host to remote. Artur Alekseev 2023-09-11 23:23:12 +03:00
  • baa5c8e853
    Anti-attach: increase function buffer sizes master Matthijs Lavrijsen 2023-07-30 01:07:02 +02:00
  • b854ab1382
    ScyllaTest: do not use SystemSessionProcessInformation Matthijs Lavrijsen 2023-07-30 01:05:52 +02:00
  • 417d8d91b7
    ntdll.h: const correctness Matthijs Lavrijsen 2023-07-30 01:00:32 +02:00
  • 37b35ddcb1
    Add Cheat Engine to hidden process/window lists Matthijs Lavrijsen 2023-05-11 23:23:54 +02:00
  • 74d928f6a2
    Add API monitor and new WinDBG to hidden process/window lists Matthijs Lavrijsen 2023-05-11 22:38:55 +02:00
  • a727ac39e1
    Remove dead AppVeyor link v1.4 Duncan Ogilvie 2023-03-24 13:16:08 +00:00
  • 84d15bfc64
    Pin marketplace actions + release notes Duncan Ogilvie 2023-03-24 13:15:08 +00:00
  • cee6c0a1ad
    Merge pull request #148 from GDATAAdvancedAnalytics/fix-vmprotect Duncan Ogilvie 2023-02-11 05:58:18 +01:00
  • 7fc713747c Fix compilation for Windows XP heck-gd 2023-02-10 16:17:24 +01:00
  • 1463828845 Fix compilation of other plugins heck-gd 2023-02-10 16:11:56 +01:00
  • 1c30831a67 Prevent VM detection via BIOS Option ROMs (NtQuerySystemInformation) heck-gd 2023-02-03 17:50:56 +01:00
  • b53c2f7314 Add compatibility for VMProtect 3.6+ heck-gd 2023-02-03 16:04:55 +01:00
  • 480dc49de2
    Fix XP support in GH releases by using the VS 2019 14.27 toolchain Matthijs Lavrijsen 2023-01-12 15:15:43 +01:00
  • b505009f0d Update ntdll.h TheLockpicker 2022-10-30 01:48:05 -05:00
  • 26e034fba2
    Merge 78da4e431b into a0e5b8f2b1 双草酸酯 2022-09-09 21:31:55 +00:00
  • 78da4e431b IDA 7.7 support kotori2 2022-09-09 17:29:28 -04:00
  • a0e5b8f2b1
    Add Process Monitor blacklisted processes (#142) rise 2022-04-26 17:22:19 +08:00
  • b3ee6e7799
    add Process Monitor blacklisted processed rise 2022-03-17 14:57:17 +08:00
  • 5e2b7d047f Fix build solution profile for IDA 32bit Qynklee 2022-02-21 15:10:07 +07:00
  • bd32873795 Add profile to build IDA32-x64 Qynklee 2022-02-21 13:22:15 +07:00
  • c9a5bd7016 Fix for IDA77 remote debug x86 and local and remote debug x64 - IDA plugin now only in 64bit compile Qynklee 2022-02-21 13:12:51 +07:00
  • 9f76a6f23b Fix in IDA SDK 7.7 replace for ui_get_hwnd by GetForegroundWindow() Qynklee 2022-02-21 13:09:18 +07:00
  • 30c956b27a
    Merge pull request #133 from x64dbg/gh-actions Duncan Ogilvie 2021-10-27 21:00:29 +02:00
  • ea3e3c2d97 Build ScyllaHide with GitHub Actions Duncan Ogilvie 2021-10-27 19:08:45 +02:00
  • 2b407b33ac Exclude IDA plugins from the default build Duncan Ogilvie 2021-10-27 19:08:13 +02:00
  • 3276630006 Fix PEBHider. WindowFlags |= 0x400. Steesha 2021-09-05 18:59:54 +08:00
  • 7e648fb29e
    Update default Themida settings profile snapshot-2021-08-23_13-27-50 Matthijs Lavrijsen 2021-08-23 15:27:50 +02:00
  • 2630cba978
    IDA support for IDA 7.5 (#1) Elias Bachaalany 2021-03-18 19:14:11 -07:00
  • 2276f14771
    Add NtUserGetForegroundWindow hook snapshot-2021-01-26_02-47-19 Matthijs Lavrijsen 2021-01-26 03:47:19 +01:00
  • 37ff0b3659
    Fix regression in x64dbg plugin caused by 9ad0839d. Fixes #115 snapshot-2020-12-15_18-48-00 Matthijs Lavrijsen 2020-12-15 19:48:00 +01:00
  • d2a719ce2e
    Fix IDA plugin build snapshot-2020-12-13_19-14-26 Matthijs Lavrijsen 2020-12-13 20:14:26 +01:00
  • 9ad0839dc2
    Fix according to newest x64dbg changes (#114) qfrtt 2020-12-13 20:06:49 +01:00
  • 20fcc54020
    Removed commented block qfrtt 2020-12-13 20:01:40 +01:00
  • 1d06e3872c
    Fix according to newest x64dbg changes qfrtt 2020-12-13 13:56:39 +01:00
  • 50703bc0db Only apply PEB changes once Sam Russell 2020-09-13 10:21:24 +02:00
  • 75fde06ac9
    Enable OSBuildVersion in plugin menus (#109) Sam Russell 2020-09-09 10:50:28 -04:00
  • 9d63e5258b Enable OSBuildVersion in plugin menus Sam Russell 2020-09-08 23:18:32 +02:00
  • 75fcdc539e
    Update to VS2019 snapshot-2020-08-09_19-11-36 Matthijs Lavrijsen 2020-08-09 21:11:36 +02:00
  • 91c0a07609 Update README snapshot-2020-07-10_14-12-03 Duncan Ogilvie 2020-07-10 16:12:03 +02:00
  • 70d6432c04 Fix release structure Duncan Ogilvie 2020-07-10 16:01:47 +02:00
  • 1bfa584a4a
    Add XP/2003 x64 support for KiUserExceptionDispatcher hook Mattiwatti 2020-06-10 18:31:11 +02:00
  • 706fec4350
    Add 64 bit support for KiUserExceptionDispatcher (#106) Bill Bierman 2020-06-08 08:04:44 -10:00
  • 769e7c0b0e Preserve prologue of KiUserExceptionDispatcher for hook removal Bill Bierman 2020-06-05 09:30:30 -10:00
  • 6d32954bfb Added manually generated trampoline for KiUserExceptionDispatcher on x86_64 Bill Bierman 2020-06-02 11:59:31 -10:00
  • 2ce3ace33b
    Wow64GetModuleHandle64: use a real process handle Mattiwatti 2020-05-30 00:35:45 +02:00
  • 59309a2057
    Adjust OtherOperationCount after NtMapViewOfSection Mattiwatti 2020-05-17 00:27:27 +02:00
  • 265940d076
    Process suspend/resume: deal with threads at the max suspend count Mattiwatti 2020-05-05 02:01:12 +02:00
  • 59b2955540
    PebPatchProcessParameters: set WindowFlags and ShowWindowFlags to 0x1 Mattiwatti 2020-04-11 23:45:54 +02:00
  • a3ae4b6b09
    RestoreKernel32Hooks: unhook time functions Mattiwatti 2020-01-09 17:13:31 +01:00
  • 1fb31fdd94
    ApplyKernel32Hook: verify kernel[32|base] is loaded before hooking Mattiwatti 2019-12-25 14:33:09 +01:00
  • ca54a69326
    Fix pedantic Clang warning Mattiwatti 2019-12-25 14:28:31 +01:00
  • 78f736e304
    Fix missing user32.dll VAs in IDA plugin Mattiwatti 2019-12-24 09:57:10 +01:00
  • acb15bbde0
    Patch OS build numbers Mattiwatti 2019-12-24 01:33:35 +01:00
  • 10ddb89fba
    ProcessDebugObjectHandle: handle overlapping buffer and return length Mattiwatti 2019-12-12 11:39:23 +01:00
  • a596f7f5d2
    Add TLS to HookLibrary for InstrumentationCallbackDisabled field Mattiwatti 2019-12-12 11:34:58 +01:00
  • 0bd149aeff
    Update ntdll.h Mattiwatti 2019-12-12 11:27:38 +01:00
  • 684af33c46
    Instrumentation callback improvements and fixes Mattiwatti 2019-06-03 03:14:45 +02:00
  • 4bc2f91915
    Rewrite WOW64 hooking Mattiwatti 2019-06-02 13:15:29 +02:00
  • 25d31f8bf4
    Native x86: if DetourCreateRemote was used, restore hooks properly Mattiwatti 2019-06-02 13:13:42 +02:00
  • 27450103d3
    Enable /LARGEADDRESSAWARE for 32 bit plugins Mattiwatti 2019-06-02 13:12:30 +02:00
  • 22e664f757
    Remove dbghelp Mattiwatti 2019-06-02 13:11:51 +02:00
  • bde2b49ada
    Better AppVeyor setup Duncan Ogilvie 2019-06-02 11:45:25 +02:00
  • aeb612d283
    Update release.bat for Appveyor Mattiwatti 2019-06-02 01:38:20 +02:00
  • 49dc5014b7
    Obsidium please (3/3) Mattiwatti 2019-05-31 22:38:22 +02:00
  • 5ad4cb7ffa
    Obsidium please (2/3) Mattiwatti 2019-05-31 22:36:59 +02:00
  • 88bc1b7810
    Obsidium please (1/3) Mattiwatti 2019-05-31 22:30:52 +02:00