Idov31 / Nidhogg

Nidhogg is an all-in-one simple to use windows kernel rootkit.

https://idov31.github.io/posts/lord-of-the-ring0-p1

GNU General Public License v3.0

1.8k stars 267 forks source link

Version 1.0 #41

Closed Idov31 closed 9 months ago

Idov31 commented 9 months ago

Version 1.0 Release

New features:

Driver hiding / unhiding
Module hiding
Port hiding / unhiding
Query hidden ports
Thread unhiding
Credential Dumping
NidhoggScript Execution
Initial Operations (As requested in #34 )

Improvements:

Refactored the driver side code and improved code quality in terms of readability, simplicity and bug fixing.
Refactored the client side code and improved code quality in terms of readability, simplicity and bug fixing.
Reduced the amount of IOCTLs.
Added automatic allocation / deallocations.
Fixed memory leaks.

Misc

New logo
New wiki
Prints can be now turned off / on with a single #define