Skip to content

Commit

Permalink
Improve Code
Browse files Browse the repository at this point in the history
  • Loading branch information
UEFI-code committed Aug 18, 2024
1 parent 2eeece8 commit e19365c
Show file tree
Hide file tree
Showing 22 changed files with 12 additions and 11 deletions.
10 changes: 5 additions & 5 deletions KernelModel_Driver/sysenter_func.c
Original file line number Diff line number Diff line change
Expand Up @@ -27,19 +27,19 @@ NTSTATUS sysenter_handler(PDEVICE_OBJECT DeviceObj, PIRP myIRP)
{
case 0:
DbgPrint("Here is 0!\n");
DbgBreakPoint();
// DbgBreakPoint();
Disable_WriteProtect();
DbgPrint("We hacked to Disable Write-Protection!\n");
break;
case 1:
DbgPrint("Here is 1!\n");
DbgBreakPoint();
// DbgBreakPoint();
HackGDT();
DbgPrint("We hacked GDT to elevate!\n");
break;
case 2:
DbgPrint("Here is 2!\n");
DbgBreakPoint();
// DbgBreakPoint();
PHYSICAL_ADDRESS theCR3 = { 0 };
theCR3.QuadPart = (UINT64)GetCR3Value() & 0xFFFFFFFFFFFFFF00;
void* cr3_mapped_p = MmMapIoSpace(theCR3, 0xfff * 8, MmNonCached);
Expand All @@ -50,13 +50,13 @@ NTSTATUS sysenter_handler(PDEVICE_OBJECT DeviceObj, PIRP myIRP)
break;
case 3:
DbgPrint("Here is 3!\n");
DbgBreakPoint();
// DbgBreakPoint();
RegisterMyINTHandler();
DbgPrint("We registered INT 0x78 handler!\n");
break;
default:
DbgPrint("Here is default!\n");
DbgBreakPoint();
// DbgBreakPoint();
PKTHREAD pCurrentThread = KeGetCurrentThread();
//PKTRAP_FRAME pTrap_frame = (PKTRAP_FRAME)((UINT8 *)pCurrentThread->KernelStack + 384);
//DbgPrint("RSI=%llX, RDI = %llX, CS = %x\n", pTrap_frame->Rsi, pTrap_frame->Rdi, pTrap_frame->SegCs);
Expand Down
2 changes: 1 addition & 1 deletion KernelModel_Driver/x64/Debug/WindowsDanger.inf
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ Class=Danger ; TODO: edit Class
ClassGuid={c8b59dcd-f4a9-43bb-b96a-31c5a5a70ed9} ; TODO: edit ClassGuid
Provider=%ManufacturerName%
CatalogFile=WindowsDanger.cat
DriverVer = 08/18/2024,7.21.48.831
DriverVer = 08/18/2024,7.42.7.212
PnpLockDown=1

[DestinationDirs]
Expand Down
5 changes: 3 additions & 2 deletions KernelModel_Driver/x64/Debug/WindowsDanger.log
Original file line number Diff line number Diff line change
@@ -1,7 +1,8 @@
 Building 'WindowsDanger' with toolset 'WindowsKernelModeDriver10.0' and the 'Universal' target platform.
Stamping x64\Debug\WindowsDanger.inf
Stamping [Version] section with DriverVer=08/18/2024,7.21.48.831
Assembling IDTTool.s...
Stamping [Version] section with DriverVer=08/18/2024,7.42.7.212
sysenter_func.c
C:\Users\uefi\WindowsDanger\KernelModel_Driver\sysenter_func.c(60,14): warning C4189: 'pCurrentThread': local variable is initialized but not referenced
WindowsDanger.vcxproj -> C:\Users\uefi\WindowsDanger\KernelModel_Driver\x64\Debug\WindowsDanger.sys
Done Adding Additional Store
Successfully signed: C:\Users\uefi\WindowsDanger\KernelModel_Driver\x64\Debug\WindowsDanger.sys
Expand Down
Binary file modified KernelModel_Driver/x64/Debug/WindowsDanger.pdb
Binary file not shown.
Binary file modified KernelModel_Driver/x64/Debug/WindowsDanger.sys
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file modified KernelModel_Driver/x64/Debug/WindowsDanger.tlog/link.read.1.tlog
Binary file not shown.
Original file line number Diff line number Diff line change
@@ -1,2 +1,2 @@
C:\USERS\UEFI\WINDOWSDANGER\KERNELMODEL_DRIVER\X64\DEBUG\WINDOWSDANGER.SYS|638595625115126733
C:\USERS\UEFI\WINDOWSDANGER\KERNELMODEL_DRIVER\X64\DEBUG\WINDOWSDANGER\WINDOWSDANGER.CAT|638595625138252098
C:\USERS\UEFI\WINDOWSDANGER\KERNELMODEL_DRIVER\X64\DEBUG\WINDOWSDANGER.SYS|638595637297842543
C:\USERS\UEFI\WINDOWSDANGER\KERNELMODEL_DRIVER\X64\DEBUG\WINDOWSDANGER\WINDOWSDANGER.CAT|638595637339359906
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ Class=Danger ; TODO: edit Class
ClassGuid={c8b59dcd-f4a9-43bb-b96a-31c5a5a70ed9} ; TODO: edit ClassGuid
Provider=%ManufacturerName%
CatalogFile=WindowsDanger.cat
DriverVer = 08/18/2024,7.21.48.831
DriverVer = 08/18/2024,7.42.7.212
PnpLockDown=1

[DestinationDirs]
Expand Down
Binary file modified KernelModel_Driver/x64/Debug/WindowsDanger/WindowsDanger.sys
Binary file not shown.
Binary file modified KernelModel_Driver/x64/Debug/WindowsDanger/windowsdanger.cat
Binary file not shown.
Binary file modified KernelModel_Driver/x64/Debug/sysenter_func.obj
Binary file not shown.
Binary file modified KernelModel_Driver/x64/Debug/vc143.pdb
Binary file not shown.

0 comments on commit e19365c

Please sign in to comment.