Commit graph

Select branches

Hide pull requests

debugobject-leak

master

#101

#102

#103

#103

#104

#104

#16

#21

#30

#31

#32

#45

#52

#53

#55

#64

#68

#69

#77

#78

#79

#82

#86

#87

#89

#91

#96

V0001

V0002

V0003

V0004

V0005

V0006

V0007

V0008

V0009

V0010

V0012

V0013

V0014

v0011

v0015

v0016

v0017

v0018

v0019

Mono Color

• ad3b8895a9
  Merge a91557b81f into 14aee055b1 Yoshk4e 2026-08-08 19:19:10 +00:00
• a91557b81f Update main.cpp Yoshk4e 2026-08-08 11:59:43 -07:00
• 95d8a4273a feat(hooks): Hide testing mode Yoshk4e 2026-08-08 11:56:53 -07:00
• c2030b1ca9
  Merge 1731ac0ae9 into 14aee055b1 Duncan Ogilvie 2026-07-18 15:36:23 +02:00
• 1731ac0ae9 Bound ObjectTypes traversal to native output debugobject-leak Duncan Ogilvie 2026-07-18 15:36:03 +02:00
• 701c2cbead Clarify thread-hide rollback policy Duncan Ogilvie 2026-07-18 14:45:43 +02:00
• 37a333b654 Keep ThreadHideFromDebugger fail-closed Duncan Ogilvie 2026-07-18 14:36:51 +02:00
• 75c43c4775 Preserve exited thread hide state Duncan Ogilvie 2026-07-18 14:10:48 +02:00
• 40ce234123 Preserve anti-debug state across lifecycle edges Duncan Ogilvie 2026-07-18 13:58:46 +02:00
• 35eaa4a93b Avoid leaking DebugObject references Duncan Ogilvie 2026-07-18 13:48:16 +02:00
• e5aa6152da Preserve preexisting thread hide state Duncan Ogilvie 2026-07-18 13:41:52 +02:00
• b13a71ca7a Close additional anti-debug side channels Duncan Ogilvie 2026-07-18 13:11:04 +02:00
• 7b7b3a00f5 Match ProcessDebugObjectHandle validation behavior Duncan Ogilvie 2026-07-18 12:53:21 +02:00
• 14aee055b1
  Merge pull request #101 from mrexodia/debugobject-leak master Duncan Ogilvie 2026-07-18 12:45:31 +02:00
• 1c73d1f96d VMP anti-debug and anti-vm fix until 3.10.6 lityrgia 2026-07-17 17:56:29 +02:00
• 757b02470a Clarify PE subsystem validation Duncan Ogilvie 2026-07-17 01:37:37 +02:00
• c9a5b56112 Filter active DebugObject counts precisely Duncan Ogilvie 2026-07-16 23:57:05 +02:00
• 63c17a688d Restore Windows 7 driver builds Duncan Ogilvie 2026-07-16 19:08:32 +02:00
• 87ead6c921 Fix DebugObject detection in VMProtect 3.9.5 Duncan Ogilvie 2026-07-16 18:50:13 +02:00
• 69dfe34304
  Merge pull request #96 from starsunyzl/master Duncan Ogilvie 2025-09-02 16:03:41 +02:00
• 4ef7bde7a5
  Update README with hiding instructions and warnings Duncan Ogilvie 2025-09-02 16:03:24 +02:00
• fcd24c952a
  Fix current driver name zleon 2025-07-07 20:29:46 +08:00
• f1fbb18ec8 Update installation instructions v0019 Duncan Ogilvie 2025-06-01 17:04:17 +02:00
• 787876e39c Allow setting the driver name for GUI and x64dbg plugin Duncan Ogilvie 2025-06-01 16:44:36 +02:00
• 826c47cfde Derive the device name from the service Duncan Ogilvie 2025-06-01 16:34:35 +02:00
• f7781bdec5
  Merge pull request #91 from vxcall/master v0018 Duncan Ogilvie 2025-02-26 10:51:43 +01:00
• f4d17d2060 updated build windows version, disabled inf2cat and treat warnings as error vxcall 2025-02-23 07:47:42 +09:00
• 4196dd3c2d
  Merge pull request #89 from mrexodia/github-actions v0017 Duncan Ogilvie 2025-01-29 22:40:06 +01:00
• 32d3315d63 Update github actions Duncan Ogilvie 2025-01-29 22:34:46 +01:00
• 4c7cb4933e
  Merge pull request #87 from rexyrexy/patch-1 Duncan Ogilvie 2025-01-29 17:41:44 +01:00
• 5e35a3334b
  Fix for 32 bit debuggee Rexy 2025-01-29 14:26:09 +03:00
• 075c8aac5b
  Fix for VMProtect misalignment check Rexy 2024-12-18 19:39:36 +03:00
• 66f323e7f4 VMProtect 3.9.1 latest Anti-Debug Patch unknown 2024-10-21 11:26:36 +09:00
• abceae2ae3 Update RtlAllocateMemory xmaple555 2024-01-15 06:53:58 +08:00
• 2b3cb0dea1 Update ExAllocatePoolWithTag xmaple555 2024-01-15 06:15:34 +08:00
• 07b2b7158b
  Merge pull request #79 from HyperSine/master Duncan Ogilvie 2023-05-23 17:01:40 +02:00
• 327a50c6f7
  fix kernel arbitrary write zero vulnerability HyperSine 2023-05-23 20:35:25 +08:00
• 9ef27398d7
  Merge pull request #78 from hfiref0x/master Duncan Ogilvie 2023-05-22 14:53:29 +02:00
• e076af56e9
  Update TitanHide.cpp hfiref0x 2023-05-22 18:43:47 +07:00
• df77abcbca
  Merge pull request #77 from HyperSine/master Matthijs Lavrijsen 2023-04-14 16:04:43 +02:00
• e3a2147373
  replace some Nt* APIs with Zw* version, because they are called from kernel mode HyperSine 2023-04-14 11:48:12 +08:00
• 6a5a68a244 Call ProbeForWrite(ReturnLength) to fix a bug v0016 Duncan Ogilvie 2022-08-19 17:47:12 +02:00
• fb7085e595
  Merge pull request #69 from brandonros/patch-1 Duncan Ogilvie 2022-06-12 20:44:57 +02:00
• c563a22e16
  update WDK download links Brandon Ros 2022-06-11 18:27:10 -04:00
• 77337790da
  Merge pull request #68 from boris768/master Duncan Ogilvie 2022-05-12 16:34:42 +02:00
• b220db5743 NtQuerySystemInformation: handle SystemKernelDebuggerInformationEx too boris768 2022-05-12 19:12:59 +05:00
• 93f3bf218b
  Update README.md v0015 Duncan Ogilvie 2021-10-27 18:07:00 +02:00
• a20f607dae
  Merge pull request #64 from mrexodia/gh-actions Duncan Ogilvie 2021-10-27 18:04:18 +02:00
• 3ef0002e25 Build TitanHide with GitHub Actions Duncan Ogilvie 2021-10-27 14:58:17 +02:00
• 7ac3b1b731 Fix solution directory structure and release script Duncan Ogilvie 2021-10-27 17:42:20 +02:00
• 17e30142ad Explicitly set /fd SHA1 for signing Duncan Ogilvie 2021-10-27 17:16:28 +02:00
• 2d32af33c5
  Merge branch 'master' of https://github.com/mrexodia/TitanHide Matthijs Lavrijsen 2021-04-06 16:44:02 +02:00
• b6033e0a20
  SSDTfind: only search for KiSystemServiceStart in .text Matthijs Lavrijsen 2021-04-06 16:43:41 +02:00
• 7459b00793
  Merge pull request #55 from thehlopster/master Matthijs Lavrijsen 2021-02-07 19:30:25 +01:00
• e9e1625f63 Fixed the typo thehlopster 2021-02-07 15:53:36 +03:00
• 7e2993d893
  Fix NtSystemDebugControl hook Matthijs Lavrijsen 2021-02-04 08:55:45 +01:00
• ead16e08f9
  Handle NtQueryInformationThread(ThreadHideFromDebugger) Matthijs Lavrijsen 2021-02-04 08:43:58 +01:00
• da8a8c4cf4
  Simplify ProcessDebugObjectHandle hook Matthijs Lavrijsen 2021-02-04 08:42:27 +01:00
• a31fafc9ab
  Null-terminate result of _vsnprintf in Log() Matthijs Lavrijsen 2021-02-04 08:38:59 +01:00
• 26c4be8189
  Run AStyle Matthijs Lavrijsen 2021-02-04 07:57:29 +01:00
• 9050efb791
  Add NtCreateThreadEx hook Matthijs Lavrijsen 2021-01-12 20:05:34 +01:00
• 7252fc5664
  Disable HideFromDebugger in threads that already have this flag set Matthijs Lavrijsen 2021-01-12 16:15:54 +01:00
• 1c6ba9796e
  Merge pull request #53 from Mattiwatti/pooltag Matthijs Lavrijsen 2020-10-03 22:31:55 +02:00
• 3c61aeb738
  Use randomised pool tags Matthijs Lavrijsen 2020-10-03 22:23:31 +02:00
• d91415a0aa
  Merge pull request #52 from Mattiwatti/vs2019 Matthijs Lavrijsen 2020-10-03 22:10:12 +02:00
• 6f8bffd932
  Update to VS2019 Matthijs Lavrijsen 2020-10-03 22:04:53 +02:00
• b0443d305a Shoutout! Duncan Ogilvie 2020-07-08 01:10:52 +02:00
• 872f6e9b7c See #44: Fix other hidden processes being able to remove debug registers, fix race condition for stripping ContextFlags dauthleikr 2020-02-28 12:12:40 +01:00
• 69e24900ee
  ProcessDebugObjectHandle: handle overlapping buffer and return length Mattiwatti 2019-12-05 20:17:04 +01:00
• ff0283bf07 separate TitanHide and TitanUnhide commands Duncan Ogilvie 2019-11-22 15:25:04 +01:00
• df6e5b592b improve TitanHide plugin for x64dbg to work correctly on restart and to allow custom options Duncan Ogilvie 2019-11-21 16:48:29 +01:00
• 02504a1cd5 Update README.md Duncan Ogilvie 2019-11-13 12:51:09 +01:00
• d66567a4b9
  ThreadWow64Context: only hook if call is from and to a hidden process Mattiwatti 2019-04-11 11:49:13 +02:00
• 0b01fbb185
  NtGetContextThread: only hook if call is from and to a hidden process Mattiwatti 2019-04-11 11:40:57 +02:00
• 3e4f55d99b
  Fix x86 build Mattiwatti 2019-03-25 23:10:12 +01:00
• b3b5fd8745
  Add NtGetContextThread/NtQIT(ThreadWow64Context) hook Mattiwatti 2019-03-25 23:01:21 +01:00
• e95b00a3f4
  Update README.md Mattiwatti 2019-03-25 22:54:18 +01:00
• 32ec505335
  TitanHideTest: do not call CheckSystemDebugControl() under WOW64 Mattiwatti 2019-03-24 20:56:11 +01:00
• 2940743163
  Fix Driver Verifier violation Mattiwatti 2019-03-24 20:27:12 +01:00
• 43a6592bac
  Redo dcaceb9, "Fix Driver Verifier violation" Mattiwatti 2019-03-24 20:26:40 +01:00
• a584b7100e
  Revert dcaceb9. Fixes #35 Mattiwatti 2019-03-24 19:49:30 +01:00
• 85fc72bb3e
  Add WOW64 NtSetContextThread support. Fixes #7 Mattiwatti 2019-03-13 00:45:33 +01:00
• 15a3fa7b4d
  Add Resharper printf argument type checking and formatting to Log() Mattiwatti 2019-03-13 00:39:37 +01:00
• dcaceb90ba
  Fix Driver Verifier violation Mattiwatti 2019-03-13 00:39:21 +01:00
• 2d927be5f8
  Fix Driver Verifier violation Mattiwatti 2019-03-13 00:39:05 +01:00
• b737646e53
  SSDT hooking: remove InterlockedSet and replace with RtlSuperCopyMemory Mattiwatti 2019-03-13 00:38:44 +01:00
• 58a0a3a849
  Rewrite RtlSuperCopyMemory Mattiwatti 2019-03-13 00:38:20 +01:00
• 03923fa3eb
  Update README.md Mattiwatti 2019-03-10 21:38:04 +01:00
• 43e266596b
  Fix OllyDbg plugin compile error with new SDKs Mattiwatti 2019-03-10 21:14:00 +01:00
• 424dc35f70
  Log(): use DbgPrintEx so driver output is visible in DebugView Mattiwatti 2019-03-10 20:55:03 +01:00
• 77ae4e97c3
  NtClose hook: prevent the ProtectFromClose handle flag from triggering a user mode exception Add NtDuplicateObject hook to achieve the same thing in the case that the caller passes DUPLICATE_CLOSE_SOURCE and a source handle with ProtectFromClose set, an indirect way of calling NtClose that doesn't go through the SSDT and so bypasses the first hook Mattiwatti 2019-01-14 19:05:49 +01:00
• 47ca37e36d
  Fix VMProtect detection of NtQueryInformationProcess(HideProcessDebugObjectHandle) hook Mattiwatti 2018-09-22 02:01:18 +02:00
• 2763a4596e Fix handle leak in NtQueryInformationProcess(ProcessDebugObjectHandle) (#30) Matthijs Lavrijsen 2018-09-02 02:01:48 +02:00
• 5340a7d0a4 NtClose hook improvements: (#31) Matthijs Lavrijsen 2018-09-02 02:01:26 +02:00
• 81aafbafb6
  Merge branch 'master' into mutex-ntclose Duncan Ogilvie 2018-09-02 02:01:08 +02:00
• fdf602263e Do not attempt to hook NtSetContextThread if the call is coming from kernel mode Mattiwatti 2018-08-27 05:01:00 +02:00
• 300726c7b9
  Fix handle leak in NtQueryInformationProcess(ProcessDebugObjectHandle) Mattiwatti 2018-08-27 05:27:02 +02:00
• 5206a322ef
  Do not attempt to hook NtSetContextThread if the call is coming from kernel mode Mattiwatti 2018-08-27 05:01:00 +02:00
• 4d68e7de56
  NtClose hook improvements: Mattiwatti 2018-08-27 04:37:45 +02:00
• 3bb2af0682
  Restore ReturnLength in query hooks Duncan Ogilvie 2017-11-08 21:45:54 +01:00