Giter Club home page Giter Club logo

xntsv's Introduction

Donate GitHub tag (latest SemVer) GitHub All Releases gitlocalized

XNTSV program for detailed viewing of system structures in Windows.

During process creation in Windows, special system structures appear in the system such as:

  • PEB
  • TEB *
  • PEB_LDR_DATA
  • LDR_DATA_TABLE_ENTRY
  • RTL_USER_PROCESS_PARAMETERS
  • EPROCESS etc.

The list of different structures is large and specific for each version of the operating system.

You could easily add your own structs (Edit structs/ARCH/custom.json)

Officially it is not fully documented and change in different Windows versions.

This program shows complete information about these structures. It can be useful for researchers of Windows internals, as well as creators of software protection.

The program supports now:

  • Windows 7
  • Windows 7 SP1
  • Windows 8
  • Windows 8.1
  • Windows Server 2016
  • Windows Server 2019
  • Windows 10 (all builds)
  • Windows 11 (build 22000)

The program does not support now Windows 2000,XP and Vista. If you need structs for these OS use old versions of XNTSV.

The program supports now kernel mode. But you need sign driver with valid driver cert or use test cert. https://docs.microsoft.com/en-us/windows-hardware/drivers/install/how-to-test-sign-a-driver-package

alt text

alt text alt text alt text alt text alt text

Special Thanks

xntsv's People

Contributors

horsicq avatar subdesign avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

xntsv's Issues

oh my friend

Dude, if signing a driver is a problem, I could handle it.
There are also methods to disable signature checks. I wish you hadn't given up on the old project.

We also took the promise of adjusting the structs according to the current systems. Anyway, good luck

Sign driver

I'm not good with driver signatures, so I wanted to clarify how to install a signed driver.
When I first started the program, I got an error installing the driver. I created a test certificate, but how do I install the driver now? What is it called?
When starting the program, it just displays the error "Cannot load driver"

Filtering feature request

image

I load struct manually from here, it's tiring for my eyes and takes my time to find what I'm looking for.
Filtering feature that will quickly find what we want from here

I'm sorry for the inconvenience

2.1 Crash Kernel Mode

My brother is not crashing the previous version but the latest version is 2.01 crashing

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.