MCPcopy Create free account

hub / github.com/Idov31/Nidhogg / functions

Functions347 in github.com/Idov31/Nidhogg

⨍ Functions 347◇ Types & classes 183
↓ 1 callersMethodInjectShellcodeThread
Nidhogg/MemoryHandler.cpp:378
↓ 1 callersFunctionIsFileExists
Nidhogg/FileHelper.cpp:107
↓ 1 callersFunctionIsValidListEntry
Nidhogg/ListHelper.hpp:241
↓ 1 callersFunctionIsValidListEntryUnsafe
Nidhogg/ListHelper.hpp:226
↓ 1 callersMethodListHiddenPorts
Nidhogg/NetworkHandler.cpp:278
↓ 1 callersMethodListHiddenProcesses
Nidhogg/ProcessHandler.cpp:493
↓ 1 callersMethodListHiddenThreads
Nidhogg/ThreadHandler.cpp:394
↓ 1 callersMethodListObCallbacks
Nidhogg/AntiAnalysisHandler.cpp:730
↓ 1 callersMethodListProtectedFiles
Nidhogg/FileHandler.cpp:394
↓ 1 callersMethodListProtectedProcesses
Nidhogg/ProcessHandler.cpp:446
↓ 1 callersMethodListProtectedThreads
Nidhogg/ThreadHandler.cpp:347
↓ 1 callersMethodListPsNotifyRoutines
Nidhogg/AntiAnalysisHandler.cpp:530
↓ 1 callersMethodListRegistryCallbacks
Nidhogg/AntiAnalysisHandler.cpp:333
↓ 1 callersMethodListRegistryItems
Nidhogg/RegistryHandler.cpp:906
↓ 1 callersMethodLoad
Nidhogg/NofLoader.cpp:73
↓ 1 callersFunctionNidhoggEntry
Nidhogg/Nidhogg.cpp:50
↓ 1 callersMethodPatchModule
Nidhogg/MemoryHandler.cpp:452
↓ 1 callersFunctionPrintAsciiArt
NidhoggClient/NidhoggClient.h:33
↓ 1 callersMethodProtectFile
Nidhogg/FileHandler.cpp:292
↓ 1 callersMethodProtectProcess
Nidhogg/ProcessHandler.cpp:323
↓ 1 callersMethodProtectThread
Nidhogg/ThreadHandler.cpp:292
↓ 1 callersMethodRegNtPostEnumerateKeyHandler
Nidhogg/RegistryHandler.cpp:350
↓ 1 callersMethodRegNtPostEnumerateValueKeyHandler
Nidhogg/RegistryHandler.cpp:479
↓ 1 callersMethodRegNtPreDeleteKeyHandler
Nidhogg/RegistryHandler.cpp:102
↓ 1 callersMethodRegNtPreDeleteValueKeyHandler
Nidhogg/RegistryHandler.cpp:138
↓ 1 callersMethodRegNtPreQueryKeyHandler
Nidhogg/RegistryHandler.cpp:178
↓ 1 callersMethodRegNtPreQueryMultipleValueKeyHandler
Nidhogg/RegistryHandler.cpp:255
↓ 1 callersMethodRegNtPreQueryValueKeyHandler
Nidhogg/RegistryHandler.cpp:215
↓ 1 callersMethodRegNtPreSetValueKeyHandler
Nidhogg/RegistryHandler.cpp:310
↓ 1 callersMethodRemoveFile
Nidhogg/FileHandler.cpp:333
↓ 1 callersMethodRemoveHiddenPort
Nidhogg/NetworkHandler.cpp:176
↓ 1 callersMethodRemoveProcess
Nidhogg/ProcessHandler.cpp:378
↓ 1 callersMethodRemoveRegItem
Nidhogg/RegistryHandler.cpp:802
↓ 1 callersMethodRemoveThread
Nidhogg/ThreadHandler.cpp:250
↓ 1 callersMethodReplaceCallback
Nidhogg/AntiAnalysisHandler.cpp:240
↓ 1 callersMethodRestoreModules
Nidhogg/MemoryHandler.cpp:634
↓ 1 callersMethodSetExitIrql
Nidhogg/IrqlGuard.h:40
↓ 1 callersMethodSetProcessSignature
Nidhogg/ProcessHandler.cpp:241
↓ 1 callersFunctionSplitStringBySpaceW
* Description: * SplitStringBySpaceW is responsible for splitting a string by spaces and returning a vector of wstrings. * * Parameters: * @str [_In
NidhoggClient/Helper.cpp:124
↓ 1 callersFunctionToLower
* Description: * ToLower is responsible for converting a string to lowercase. * * Parameters: * @str [_Inout_ std::string&] -- The string to be conve
NidhoggClient/Helper.cpp:36
↓ 1 callersMethodUnhideProcess
Nidhogg/ProcessHandler.cpp:147
↓ 1 callersMethodUnhideThread
Nidhogg/ThreadHandler.cpp:133
↓ 1 callersMethodwhat
NidhoggClient/FileHelper.hpp:15
MethodAddCallback
Nidhogg/AntiAnalysisHandler.cpp:899
MethodAddHiddenDriver
Nidhogg/MemoryHandler.cpp:1870
MethodAddHiddenModule
Nidhogg/MemoryHandler.cpp:1825
MethodAddHiddenProcess
Nidhogg/ProcessHandler.cpp:350
MethodAddHiddenThread
Nidhogg/ThreadHandler.cpp:318
FunctionAllocateMemory
Nidhogg/MemoryAllocator.hpp:43
MethodAntiAnalysisHandler
NidhoggClient/AntiAnalysisHandler.h:39
MethodAntiAnalysisHandler
Nidhogg/AntiAnalysisHandler.cpp:5
MethodAntiAnalysisHandlerException
NidhoggClient/AntiAnalysisHandler.h:13
FunctionApcInjectionCallback
* Description: * ApcInjectionCallback is responsible for handling the APC cleanup. * * Parameters: * @Apc [PKAPC] -- The received APC. * @No
Nidhogg/MemoryHandler.cpp:1905
MethodAutoLock
Nidhogg/AutoLock.h:5
MethodCheckInput
* Description: * CheckInput is responsible for checking the input parameters for the thread commands. * * Parameters: * @params [_In_ const std::vecto
NidhoggClient/ThreadHandler.cpp:142
MethodCheckInput
* Description: * CheckInput is responsible for checking the input parameters for registry commands. * * Parameters: * @params [_In_ const std::vector
NidhoggClient/RegistryHandler.cpp:229
MethodCheckInput
* Description: * CheckInput is responsible for checking the input parameters for the process commands. * * Parameters: * @params [_In_ const std::vec
NidhoggClient/ProcessHandler.cpp:319
MethodCheckInput
* Description: * CheckInput is responsible for checking the input parameters for the hide command. * * Parameters: * @params [_In_ const std::vector<s
NidhoggClient/NetworkHandler.cpp:153
MethodClearFiles
* Description: * ClearFiles is responsible for clearing all protected files. * * Parameters: * @type [_In_ FileType] -- The type of files to be cleare
NidhoggClient/FileHandler.cpp:192
MethodClearHiddenPorts
* Description: * ClearHiddenPorts is responsible for issuing a IOCTL_CLEAR_HIDDEN_PORTS to clear all hidden ports. * * Parameters: * There are no para
NidhoggClient/NetworkHandler.cpp:277
FunctionClearList
Nidhogg/ListHelper.hpp:151
MethodClearRegItem
* Description: * ClearRegItem is responsible for clearing all registry of item type. * * Parameters: * @type [_In_ RegItemType] -- The type of regist
NidhoggClient/RegistryHandler.cpp:548
MethodClearThreads
* Description: * ClearProtectedThreads is responsible for issuing a IOCTL_CLEAR_PROTECTED_THREADS to clear all protected threads. * * Parameters:
NidhoggClient/ThreadHandler.cpp:236
MethodCommandHandler
NidhoggClient/CommandHandler.h:19
FunctionConvertToNumber
NidhoggClient/Convertor.hpp:85
MethodConvertorException
NidhoggClient/Convertor.hpp:14
FunctionCreateProcessNotifyDummyFunction
* Description: * CreateProcessNotifyDummyFunction is a dummy function for create process notify routine. * * Parameters: * @ParentId [HANDLE] -- Unu
Nidhogg/AntiAnalysisHandler.cpp:1098
FunctionCreateProcessNotifyExDummyFunction
* Description: * CreateProcessNotifyExDummyFunction is a dummy function for create process notify routine ex. * * Parameters: * @Process [PEPROCESS
Nidhogg/AntiAnalysisHandler.cpp:1079
FunctionCreateThreadNotifyDummyFunction
* Description: * CreateThreadNotifyDummyFunction is a dummy function for create thread notify routine. * * Parameters: * @ProcessId [HANDLE] -- Unuse
Nidhogg/AntiAnalysisHandler.cpp:1117
FunctionDriverEntry
Nidhogg/Nidhogg.cpp:8
MethodDumpCredentials
* Description: * DumpCredentials is responsible for dumping credentials from LSASS. * * Parameters: * There are no parameters. * * Returns: * @
NidhoggClient/MemoryHandler.cpp:338
MethodEnableDisableEtwTi
* Description: * EnableDisableEtwTi is responsible for enabling or disabling ETW-TI. * * Parameters: * @enable [_In_ bool] -- Whether to enable or di
NidhoggClient/AntiAnalysisHandler.cpp:240
MethodFileHandler
NidhoggClient/FileHandler.h:23
MethodFileHandler
Nidhogg/FileHandler.cpp:5
MethodFileHandlerException
NidhoggClient/FileHandler.h:9
MethodFindAlertableThread
Nidhogg/MemoryHandler.cpp:1654
MethodFindCallback
Nidhogg/AntiAnalysisHandler.cpp:991
MethodFindHiddenDriver
Nidhogg/MemoryHandler.cpp:1797
MethodFindHiddenModule
Nidhogg/MemoryHandler.cpp:1743
FunctionFindListEntry
Nidhogg/ListHelper.hpp:91
MethodFindRegItem
Nidhogg/RegistryHandler.cpp:678
MethodGetActiveProcessLinksOffset
Nidhogg/ProcessHandler.cpp:585
MethodGetEtwGuidLockOffset
Nidhogg/AntiAnalysisHandler.cpp:1210
MethodGetEtwProviderEnableInfoOffset
Nidhogg/AntiAnalysisHandler.cpp:1173
MethodGetKeyObject
Nidhogg/RegistryHandler.cpp:994
MethodGetLsassMetadata
Nidhogg/MemoryHandler.cpp:1186
MethodGetNameFromKeyEnumPreInfo
Nidhogg/RegistryHandler.cpp:634
MethodGetNameFromValueEnumPreInfo
Nidhogg/RegistryHandler.cpp:596
MethodGetPageCommitmentLockOffset
Nidhogg/MemoryHandler.cpp:2001
MethodGetSignatureLevelOffset
* Description: * GetSignatureLevelOffset is responsible for getting the signature level offset depends on the windows version. * (field SignatureLevel
Nidhogg/ProcessHandler.cpp:628
MethodGetThreadListEntryOffset
Nidhogg/ThreadHandler.cpp:466
MethodGetThreadListHeadOffset
Nidhogg/ThreadHandler.cpp:522
MethodGetThreadLockOffset
Nidhogg/ThreadHandler.cpp:565
MethodGetTokenOffset
Nidhogg/ProcessHandler.cpp:541
MethodGetVadRootOffset
Nidhogg/MemoryHandler.cpp:1952
MethodHandleCommand
* Description: * HandleCommand is responsible for handling a thread related command. * * Parameters: * @command [_In_ std::string] -- The command
NidhoggClient/ThreadHandler.cpp:14
MethodHandleCommand
* Description: * HandleCommand is responsible for handling commands related to registry operations. * * Parameters: * @command [_In_ std::string] -- T
NidhoggClient/RegistryHandler.cpp:14
MethodHandleCommand
* Description: * HandleCommand is responsible for handling a process related command. * * Parameters: * @command [_In_ std::string] -- The command to
NidhoggClient/ProcessHandler.cpp:147
MethodHandleCommand
NidhoggClient/NidhoggInterface.cpp:66
MethodHandleCommand
* Description: * HandleCommand is responsible for handling a memory related command. * * Parameters: * @command [_In_ std::string] -- The command
NidhoggClient/MemoryHandler.cpp:14
← previousnext →101–200 of 347, ranked by callers