Mirrors/wavestone-cdt-edrsandblast
1
0
Fork 0
mirror of https://github.com/wavestone-cdt/EDRSandblast.git synced 2026-06-08 16:37:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

DSE bypass : implemented "callback swapping" method

Browse Source 
The new default method for unsigned driver loading uses a KDP compatible
technique, since it does not overwrite the protected variable g_CiOptions.
Based on the work of: https://github.com/0mWindyBug/KDP-compatible-driver-loader

Co-authored-by: Windy Bug <139051196+0mWindyBug@users.noreply.github.com>
This commit is contained in:
Maxime Meignan
2023-11-03 14:38:01 +01:00
parent 15c3b706f1
commit f15471d12c
12 changed files with 1408 additions and 1015 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Offsets/WdigestOffsets.csv
+63 -21
View File
@@ -1,35 +1,77 @@
wdigestVersion,g_fParameter_UseLogonCredentialOffset,g_IsCredGuardEnabledOffset
imageVersion,g_fParameter_UseLogonCredential,g_IsCredGuardEnabled
wdigest_10240-16384.dll,35134,0
wdigest_10240-17184.dll,35144,34ba0
wdigest_10240-18244.dll,35144,34ba0
wdigest_10240-18608.dll,35144,34ba0
wdigest_10586-0.dll,35db0,35ba8
wdigest_15254-245.dll,34d8c,34b88
wdigest_10240-17184.dll,35144,34ba0
wdigest_14393-3750.dll,35dc0,35ba8
wdigest_15063-1868.dll,34d8c,34b88
wdigest_14393-0.dll,35dc0,35ba8
wdigest_14393-3808.dll,35dc0,35ba8
wdigest_10240-18638.dll,35144,34ba0
wdigest_10586-0.dll,35db0,35ba8
wdigest_14393-0.dll,35dc0,35ba8
wdigest_14393-3024.dll,35dc0,35ba8
wdigest_10240-16384.dll,35134,0
wdigest_14393-3750.dll,35dc0,35ba8
wdigest_14393-3808.dll,35dc0,35ba8
wdigest_15063-0.dll,34d8c,34b88
wdigest_15063-1868.dll,34d8c,34b88
wdigest_15063-2409.dll,34d8c,34b88
wdigest_15063-2411.dll,34d8c,34b88
wdigest_15254-245.dll,34d8c,34b88
wdigest_16299-15.dll,35114,34b88
wdigest_16299-192.dll,35114,34b88
wdigest_16299-1937.dll,35114,34b88
wdigest_16299-1217.dll,35114,34b88
wdigest_17134-1610.dll,36114,35b88
wdigest_16299-1932.dll,35114,34b88
wdigest_16299-1937.dll,35114,34b88
wdigest_16299-1992.dll,35114,34b88
wdigest_17134-829.dll,35114,34b88
wdigest_17134-1.dll,35114,34b88
wdigest_17134-590.dll,35114,34b88
wdigest_17134-829.dll,35114,34b88
wdigest_17134-1550.dll,35114,34b88
wdigest_17134-1553.dll,35114,34b88
wdigest_17134-1610.dll,36114,35b88
wdigest_17763-1.dll,35114,34b88
wdigest_17763-194.dll,35114,34b88
wdigest_17763-1339.dll,36114,35b88
wdigest_17763-1294.dll,35114,34b88
wdigest_17763-557.dll,35114,34b88
wdigest_17763-1282.dll,35114,34b88
wdigest_17763-1294.dll,35114,34b88
wdigest_17763-1339.dll,36114,35b88
wdigest_17763-3650.dll,38244,37c08
wdigest_17763-3772.dll,38244,37c08
wdigest_17763-3887.dll,38234,37c08
wdigest_17763-4011.dll,38234,37c08
wdigest_17763-4131.dll,38234,37c08
wdigest_17763-4974.dll,428c4,421b8
wdigest_18362-1.dll,35124,34b88
wdigest_18362-175.dll,35124,34b88
wdigest_18362-959.dll,36124,35b88
wdigest_19041-1001.dll,361b4,35c08
wdigest_18362-900.dll,35124,34b88
wdigest_18362-904.dll,35124,34b88
wdigest_19041-388.dll,361b4,35c08
wdigest_19041-329.dll,361b4,35c08
wdigest_22406-1000.dll,3caa4,3cab0
wdigest_18362-959.dll,36124,35b88
wdigest_18362-1216.dll,35124,34b88
wdigest_15063-968.dll,29b24,29708
wdigest_22000-4.dll,2ab7c,2a760
wdigest_19041-1.dll,361b4,35c08
wdigest_19041-329.dll,361b4,35c08
wdigest_19041-388.dll,361b4,35c08
wdigest_19041-1001.dll,361b4,35c08
wdigest_19041-2193.dll,3a2e4,39ca8
wdigest_19041-2604.dll,3a2e4,39ca8
wdigest_19041-2673.dll,392b4,38c88
wdigest_19041-3393.dll,45a24,452e8
wdigest_19041-3505.dll,45a24,452e8
wdigest_19041-3516.dll,45a14,452e8
wdigest_19041-3570.dll,45a14,452e8
wdigest_19041-3636.dll,45a14,452e8
wdigest_22000-1.dll,3caa4,3cab0
wdigest_22000-434.dll,3caa4,3cab0
wdigest_22000-1030.dll,3caa4,3cab0
wdigest_22000-1165.dll,3ebdc,3ebe8
wdigest_22000-1516.dll,3ebdc,3ebe8
wdigest_22000-1641.dll,3dbbc,3dbc8
wdigest_22000-1696.dll,3dbbc,3dbc8
wdigest_22000-2245.dll,4b57c,4b588
wdigest_22000-2474.dll,4b57c,4b588
wdigest_22000-2482.dll,4a56c,4a578
wdigest_22000-2538.dll,4a56c,4a578
wdigest_22406-1000.dll,3caa4,3cab0
wdigest_22621-1.dll,3ec0c,3ec18
wdigest_22621-1244.dll,4b5ac,4b5b8
wdigest_22621-1364.dll,3ec0c,3ec18
wdigest_22621-2070.dll,4b5ac,4b5b8
wdigest_22621-2361.dll,4b59c,4b5a8
wdigest_22621-2506.dll,4b59c,4b5a8
wdigest_22621-2700.dll,4b59c,4b5a8
1 wdigestVersion imageVersion g_fParameter_UseLogonCredentialOffset g_fParameter_UseLogonCredential g_IsCredGuardEnabledOffset g_IsCredGuardEnabled
2 wdigest_10240-16384.dll 35134 0
3 wdigest_10240-17184.dll 35144 34ba0
4 wdigest_10240-18244.dll wdigest_10240-18244.dll 35144 35144 34ba0 34ba0
5 wdigest_10240-18608.dll wdigest_10240-18608.dll 35144 35144 34ba0 34ba0
wdigest_10586-0.dll 35db0 35ba8
wdigest_15254-245.dll 34d8c 34b88
wdigest_10240-17184.dll 35144 34ba0
wdigest_14393-3750.dll 35dc0 35ba8
wdigest_15063-1868.dll 34d8c 34b88
wdigest_14393-0.dll 35dc0 35ba8
wdigest_14393-3808.dll 35dc0 35ba8
6 wdigest_10240-18638.dll wdigest_10240-18638.dll 35144 35144 34ba0 34ba0
7 wdigest_10586-0.dll 35db0 35ba8
8 wdigest_14393-0.dll 35dc0 35ba8
9 wdigest_14393-3024.dll wdigest_14393-3024.dll 35dc0 35dc0 35ba8 35ba8
10 wdigest_10240-16384.dll wdigest_14393-3750.dll 35134 35dc0 0 35ba8
11 wdigest_14393-3808.dll 35dc0 35ba8
12 wdigest_15063-0.dll 34d8c 34b88
13 wdigest_15063-1868.dll 34d8c 34b88
14 wdigest_15063-2409.dll 34d8c 34b88
15 wdigest_15063-2411.dll 34d8c 34b88
16 wdigest_15254-245.dll 34d8c 34b88
17 wdigest_16299-15.dll 35114 34b88
18 wdigest_16299-192.dll wdigest_16299-192.dll 35114 35114 34b88 34b88
wdigest_16299-1937.dll 35114 34b88
19 wdigest_16299-1217.dll wdigest_16299-1217.dll 35114 35114 34b88 34b88
20 wdigest_17134-1610.dll wdigest_16299-1932.dll 36114 35114 35b88 34b88
21 wdigest_16299-1937.dll 35114 34b88
22 wdigest_16299-1992.dll wdigest_16299-1992.dll 35114 35114 34b88 34b88
23 wdigest_17134-829.dll wdigest_17134-1.dll 35114 35114 34b88 34b88
24 wdigest_17134-590.dll wdigest_17134-590.dll 35114 35114 34b88 34b88
25 wdigest_17134-829.dll 35114 34b88
26 wdigest_17134-1550.dll 35114 34b88
27 wdigest_17134-1553.dll wdigest_17134-1553.dll 35114 35114 34b88 34b88
28 wdigest_17134-1610.dll 36114 35b88
29 wdigest_17763-1.dll 35114 34b88
30 wdigest_17763-194.dll wdigest_17763-194.dll 35114 35114 34b88 34b88
wdigest_17763-1339.dll 36114 35b88
wdigest_17763-1294.dll 35114 34b88
31 wdigest_17763-557.dll wdigest_17763-557.dll 35114 35114 34b88 34b88
32 wdigest_17763-1282.dll 35114 34b88
33 wdigest_17763-1294.dll 35114 34b88
34 wdigest_17763-1339.dll 36114 35b88
35 wdigest_17763-3650.dll 38244 37c08
36 wdigest_17763-3772.dll 38244 37c08
37 wdigest_17763-3887.dll 38234 37c08
38 wdigest_17763-4011.dll 38234 37c08
39 wdigest_17763-4131.dll 38234 37c08
40 wdigest_17763-4974.dll 428c4 421b8
41 wdigest_18362-1.dll 35124 34b88
42 wdigest_18362-175.dll wdigest_18362-175.dll 35124 35124 34b88 34b88
43 wdigest_18362-959.dll wdigest_18362-900.dll 36124 35124 35b88 34b88
wdigest_19041-1001.dll 361b4 35c08
44 wdigest_18362-904.dll wdigest_18362-904.dll 35124 35124 34b88 34b88
45 wdigest_19041-388.dll wdigest_18362-959.dll 361b4 36124 35c08 35b88
wdigest_19041-329.dll 361b4 35c08
wdigest_22406-1000.dll 3caa4 3cab0
46 wdigest_18362-1216.dll wdigest_18362-1216.dll 35124 35124 34b88 34b88
47 wdigest_15063-968.dll wdigest_19041-1.dll 29b24 361b4 29708 35c08
48 wdigest_22000-4.dll wdigest_19041-329.dll 2ab7c 361b4 2a760 35c08
49 wdigest_19041-388.dll 361b4 35c08
50 wdigest_19041-1001.dll 361b4 35c08
51 wdigest_19041-2193.dll 3a2e4 39ca8
52 wdigest_19041-2604.dll 3a2e4 39ca8
53 wdigest_19041-2673.dll 392b4 38c88
54 wdigest_19041-3393.dll 45a24 452e8
55 wdigest_19041-3505.dll 45a24 452e8
56 wdigest_19041-3516.dll 45a14 452e8
57 wdigest_19041-3570.dll 45a14 452e8
58 wdigest_19041-3636.dll 45a14 452e8
59 wdigest_22000-1.dll 3caa4 3cab0
60 wdigest_22000-434.dll 3caa4 3cab0
61 wdigest_22000-1030.dll 3caa4 3cab0
62 wdigest_22000-1165.dll 3ebdc 3ebe8
63 wdigest_22000-1516.dll 3ebdc 3ebe8
64 wdigest_22000-1641.dll 3dbbc 3dbc8
65 wdigest_22000-1696.dll 3dbbc 3dbc8
66 wdigest_22000-2245.dll 4b57c 4b588
67 wdigest_22000-2474.dll 4b57c 4b588
68 wdigest_22000-2482.dll 4a56c 4a578
69 wdigest_22000-2538.dll 4a56c 4a578
70 wdigest_22406-1000.dll 3caa4 3cab0
71 wdigest_22621-1.dll 3ec0c 3ec18
72 wdigest_22621-1244.dll 4b5ac 4b5b8
73 wdigest_22621-1364.dll 3ec0c 3ec18
74 wdigest_22621-2070.dll 4b5ac 4b5b8
75 wdigest_22621-2361.dll 4b59c 4b5a8
76 wdigest_22621-2506.dll 4b59c 4b5a8
77 wdigest_22621-2700.dll 4b59c 4b5a8