momo5502
db3a89a0da
Support KeyCachedInformation
2025-12-23 09:31:10 +01:00
momo5502
2be5f73755
Support ProcessPriorityClass in NtQueryInformationProcess
2025-11-20 18:25:33 +01:00
momo5502
ed7c7085b4
Fix formatting
2025-11-01 10:34:26 +01:00
momo5502
cb4fe6c30f
Merge remote-tracking branch 'origin/main' into wow64
2025-10-25 11:06:03 +02:00
Igor Pissolati
2c82277b5e
Add FileIdInformation file info class
2025-10-23 11:19:17 -03:00
Igor Pissolati
4fbd65a302
Fix DISPLAY_DEVICEW value
2025-10-22 17:17:02 -03:00
Igor Pissolati
54ebbe27c2
Implement NtUserEnumDisplaySettings syscall
2025-10-22 17:16:10 -03:00
Igor Pissolati
c8a18cf61c
Add FileIsRemoteDeviceInformation file info class
2025-10-22 17:14:51 -03:00
Igor Pissolati
c0fd8ebf51
Add FileFsAttributeInformation fs info class
2025-10-22 17:14:19 -03:00
momo5502
effd2f7a02
Merge remote-tracking branch 'origin/main' into wow64
2025-10-21 20:45:29 +02:00
Maurice Heumann
b84ae7475f
Implement ALPC port abstraction and implement DNS resolver port ( #558 )
...
This PR introduces an abstraction for ALPC ports to make them easier to
manage in the future, and implements the DNS resolver port, at least
enough to get host address queries working.
There's a lot of code in this PR that I'm not very confident about, so
don't hesitate on the feedback 😄
<img width="1377" height="624" alt="image"
src="https://github.com/user-attachments/assets/4d56b84d-4b87-42ed-9bfa-be04dbbf3735 "
/>
2025-10-21 20:42:26 +02:00
momo5502
652f8d7f17
Fix formatting
2025-10-21 20:15:20 +02:00
Maurice Heumann
304dbcc661
Comprehensive WOW64 subsystem implementation ( #555 )
...
# Major Features Implemented
**Core WOW64 Architecture**
1. Full TEB, PEB, and Windows structure implementations for 32-bit
processes
2. Proper thread context switching with 32-bit stack allocation
3. Configurable memory allocation with 32-bit/64-bit address space
handling
4. Automatic WOW64 process identification and handling
5. Heaven's Gate Implementation for handling exceptions
**Enhanced Emulation Features**
1. Fixed GDT setup and segment management for WOW64
2. Multi-architecture PE loading with proper import resolution
3. Segment-aware disassembly with WOW64 debugging capabilities
**Testing & Validation**
**32-bit Test Sample**: Minimal "hello" executable with full ASM source
# TODO
Needs more testing, currently in very early stages.
2025-10-21 20:13:01 +02:00
Igor Pissolati
248c09d554
Implement ALPC port abstraction and implement DNS resolver port
2025-10-19 23:23:29 -03:00
Igor Pissolati
887b02c240
Support file renaming and support relative path in NtQueryAttributesFile
2025-10-19 17:51:44 -03:00
brian
65eecf1cfd
Comprehensive WOW64 subsystem implementation
2025-10-13 19:55:50 +08:00
momo5502
9453123db0
Force new line at EOF
2025-10-12 17:21:51 +02:00
momo5502
c9c6b46ec2
Support object types information query
2025-09-12 20:36:45 +02:00
momo5502
f5de884ddf
Fix compilation with latest reflect version
2025-09-08 12:20:46 +02:00
momo5502
2a43b42428
Mark rdtsc(p) as available
2025-09-07 20:43:11 +02:00
momo5502
7d6648ade0
Extend clang-format column limit to 140
2025-08-16 14:55:07 +02:00
momo5502
292fc6ce67
Fix compilation
2025-08-09 17:38:20 +02:00
momo5502
386f5b1cbc
Add missing types
2025-08-09 17:20:22 +02:00
CarlTSpeak
ffea72d48a
Added basic pipe support to NtRead/WriteFile
2025-08-06 10:30:40 +01:00
momo5502
6eb4ef33ff
Handle invalid page protections
...
This fixes #420
2025-07-20 09:34:25 +02:00
3fault
2ecd3e4440
add STATUS_GUARD_PAGE_VIOLATION constant to platform includes
2025-07-02 14:06:37 -04:00
momo5502
bda89b5d1e
Add more syscalls
2025-06-15 19:48:05 +02:00
momo5502
1421550764
Cleanup and fix NtQueryInformationProcess
2025-06-15 09:31:57 +02:00
Red
f14b16d080
Fix anti-debug detections for NtQueryInformationProcess with ProcessDebugObjectHandle
2025-06-14 15:00:53 +02:00
redthing1
5d9dd122d2
minidump support: dump loading and process reconstruction
2025-06-09 23:12:45 -07:00
momo5502
e26ac99551
Fix char16_t tolower conversion
2025-06-07 11:45:43 +02:00
momo5502
956e73d839
Some fixes
2025-06-04 20:47:51 +02:00
Maurice Heumann
368a9dbdd1
Update file_management.hpp
2025-06-03 11:17:50 +02:00
Igor Pissolati
9f32620220
Fix failing checks
2025-06-02 14:32:15 -03:00
Igor Pissolati
ad3046466e
Improvements to NtQueryInformationToken
2025-06-02 14:32:15 -03:00
momo5502
9b2653afc4
Override timestamp counter for deterministic clock
2025-06-02 19:28:24 +02:00
momo5502
909b2db20d
Support more mountpoint IOCTLs
2025-06-01 12:36:50 +02:00
momo5502
e763fdac54
Support more syscalls
2025-05-31 21:27:32 +02:00
momo5502
b6f4645420
Some more syscalls
2025-05-31 13:21:19 +02:00
momo5502
c50fdd17a4
Fix compilation warnings
2025-05-31 10:37:04 +02:00
momo5502
5c0a1ce5c2
Build and test MinGW in CI
2025-05-31 09:47:55 +02:00
Hacksign
829e3d95a6
UPDATE: modify cmake scripts, adding warning messages.
2025-05-30 12:37:35 +08:00
Hacksign
e9a6911019
NEW: Add cross compile support on X86_64 Linux with MinGW toolchain.
2025-05-29 18:48:04 +08:00
momo5502
4199177aa0
Optimize fuzzer
2025-05-28 21:37:29 +02:00
Igor Pissolati
d75d70e5ec
Move new code out of network::socket
2025-05-21 12:15:18 -03:00
Igor Pissolati
4b83b20e19
Handle connect & Fix polling
2025-05-21 12:15:18 -03:00
Igor Pissolati
f5ed0752e3
Handle listen/accept/send/receive in afd_endpoint
2025-05-21 12:15:18 -03:00
momo5502
67031b40ea
More UI syscalls
2025-05-18 10:35:22 +02:00
momo5502
b89000aae9
Fix warnings
2025-05-17 20:45:24 +02:00
momo5502
153fcc3691
Return display
2025-05-17 20:27:56 +02:00
