Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
Get-NtSystemInformation now returns SystemCodeIntegrityInformation -
i.e. user-mode code integrity settings. This required reverse
engineering a dll that is only present on Windows 8 ARM devices.
|
|
When displaying handle information, you can now filter by and display
object type names: Get-NtSystemInformation
|
|
|
|
Yet another method of leaking kernel pointers.
|
|
Get-NtSystemInformation is a wrapper function for
NtQuerySystemInformation. It is a swiss-army knife tool for obtaining
internal OS information. It can currently be used to query the
following: global flags, handles, objects, kernel pool allocations, and
loaded kernel modules
|