Commits

Branch selector

 master

User selector

All users

All time

Commit History

Commits on Jan 31, 2026

• Detecting VEH Squared abuse in usermode via the Scil interface

  0xflux

  committed
  88268a6

  Copy full SHA for 88268a6

Commits on Jan 30, 2026

• Refactor test component structure

  0xflux

  committed
  79186be

  Copy full SHA for 79186be

Commits on Jan 27, 2026

• Update yt link

  0xflux

  committed
  43764cb

  Copy full SHA for 43764cb

Commits on Jan 26, 2026

• Detect malicious shellcode - from coding stream

  0xflux

  committed
  21ced40

  Copy full SHA for 21ced40

Commits on Jan 24, 2026

• Inspection of NtOpenProcess

  0xflux

  committed
  934d0ad

  Copy full SHA for 934d0ad

• Usermode EDR element now determines whether a syscall can be released

  0xflux

  committed
  3fbef4c

  Copy full SHA for 3fbef4c

• Usermode EDR element now determines whether a syscall can be released

  0xflux

  committed
  3a74167

  Copy full SHA for 3a74167

• rm print

  0xflux

  committed
  8b79482

  Copy full SHA for 8b79482

• Pauses execution of syscall thread

  0xflux

  committed
  244d0b5

  Copy full SHA for 244d0b5

• Bump wdk-mutex version

  0xflux

  committed
  fd39163

  Copy full SHA for fd39163

Commits on Jan 22, 2026

• Fix bug where value returned from syscall was marked as the incorrect size

  0xflux

  committed
  0fc29f8

  Copy full SHA for 0fc29f8

• rm prints

  0xflux

  committed
  85ecd41

  Copy full SHA for 85ecd41

• Refactor telemetry structs and update syscall handling

  0xflux

  committed
  ca89249

  Copy full SHA for ca89249

• docs

  0xflux

  committed
  6d7751e

  Copy full SHA for 6d7751e

• Successfully receive pending ioctl results from the driver

  0xflux

  committed
  bc7d6d8

  Copy full SHA for bc7d6d8

• Clean up imports

  0xflux

  committed
  1e01b74

  Copy full SHA for 1e01b74

• Refactor alt syscalls to make it clearer where the handler is

  0xflux

  committed
  dd0621e

  Copy full SHA for dd0621e

• Use an atomic global for the pending IO operations as opposed to a driver extension - this is so we can get an easier pointer to the IO queue from within the belly of system call dispatch

  0xflux

  committed
  9033d39

  Copy full SHA for 9033d39

Commits on Jan 21, 2026

• Csq for pending IOCTLs

  0xflux

  committed
  dc0d0a7

  Copy full SHA for dc0d0a7

Commits on Jan 19, 2026

• Safely init an drop a FastMutex for dealing with overlapping IO PIRPs for fast IOCTLs

  0xflux

  committed
  d0ea1ce

  Copy full SHA for d0ea1ce

Commits on Jan 18, 2026

• IOCTL for process syscall logging

  0xflux

  committed
  1dcb725

  Copy full SHA for 1dcb725

• setup ioctls in usermode

  0xflux

  committed
  8bd81bf

  Copy full SHA for 8bd81bf

• Add a shared lib

  0xflux

  committed
  c305909

  Copy full SHA for c305909

• Readme

  0xflux

  committed
  ea382c5

  Copy full SHA for ea382c5

• Update readme again

  0xflux

  committed
  f6af57c

  Copy full SHA for f6af57c

• Use youtube link instead

  0xflux

  committed
  56d48fd

  Copy full SHA for 56d48fd

• Readme with gif

  0xflux

  committed
  9e3ce25

  Copy full SHA for 9e3ce25

• Initial commit

  0xflux

  committed
  4458b8d

  Copy full SHA for 4458b8d