Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2013-05-16 | Added _SYSTEM_LOCK_INFORMATION struct | Matt Graeber | 1 | -1/+55 | |
Yet another method of leaking kernel pointers. | |||||
2013-05-13 | Cleaned up Get-NtSystemInformation | Matt Graeber | 1 | -2385/+81 | |
* Removed the unnecessary NTSTATUS entries * Used splatting instead of backticks * Fixed a n00b memory management error as well. | |||||
2013-05-12 | Object access mask now displays properly | Matt Graeber | 1 | -2/+3 | |
2013-05-12 | Removed duplicate type definition | Matt Graeber | 1 | -15/+0 | |
2013-05-12 | Removed some extraneous comments | Matt Graeber | 1 | -17/+17 | |
2013-05-12 | Added Get-NtSystemInformation | Matt Graeber | 1 | -0/+3086 | |
Get-NtSystemInformation is a wrapper function for NtQuerySystemInformation. It is a swiss-army knife tool for obtaining internal OS information. It can currently be used to query the following: global flags, handles, objects, kernel pool allocations, and loaded kernel modules |