Mirrors/hidden
6
0
Fork 0
mirror of https://github.com/JKornev/hidden synced 2024-06-25 00:18:04 +00:00
Code Issues Projects Releases Wiki Activity
27 Commits 1 Branch 2 Tags 762 KiB
C 95%
C++ 5%
98014e750e
Go to file
JKornev 98014e750e Major changes 
- Fixed BSOD on driver deinitialization step
- Fixed resources leak in the reg filter
- Fixed path normalization function
- Added support for inherit type in predefined process monitor configs
- Added support for opening protected processes by subsystem
- Added tests for protected processes
and other little fixes
2016-10-11 00:45:07 +03:00
Hidden Major changes 2016-10-11 00:45:07 +03:00
Hidden Package initial commit 2016-07-22 02:02:31 +03:00
HiddenCLI Major changes 2016-10-11 00:45:07 +03:00
HiddenLib Added Get\Set ps state ability 2016-09-22 23:17:14 +03:00
HiddenTests Major changes 2016-10-11 00:45:07 +03:00
.gitignore Added IOCTLs for the part of Ps API 2016-09-01 01:28:24 +03:00
Hidden.sln Added the HiddenTests project that contain different tests for this solution 2016-09-11 14:42:39 +03:00
README.md Update README.md 2016-08-28 00:04:49 +03:00

README.md

Hidden

This toolset developed like a solution for my reverse engineering and researching tasks. This is a very simple windows driver with a usermode interface which uses for hidding specific environment on VMs, like installed rce programs (ex. procmon, wireshark), vm infrastracture (ex. vmware tools) and etc.

Features:

  • hide registry keys and values
  • hide files and directories
  • protect specific processes using ObRegisterCallbacks
  • exclude specific processes from hidding and protection features
  • usermode interface (lib and cli) for working with driver

and so on