hasherezade/hollows_hunter

Fork 0

mirror of https://github.com/hasherezade/hollows_hunter.git synced 2026-10-12 02:15:21 +00:00

T

hasherezade f01fc143fb [FEATURE] Updated pe-sieve. Added support for the new parameters

2023-01-29 08:29:13 -08:00

.github/workflows

[NOBIN] Added Doxyfile and config for automated docs deployment

2021-08-02 14:58:13 +02:00

logo

[NOBIN] Improved icon (added big resolutions)

2021-08-11 20:23:02 +02:00

paramkit @ 58cb95f9e5

Updated paramkit

2023-01-29 08:28:34 -08:00

params_info

[FEATURE] Updated pe-sieve. Added support for the new parameters

2023-01-29 08:29:13 -08:00

pe-sieve @ 69a6657dd0

[FEATURE] Updated pe-sieve. Added support for the new parameters

2023-01-29 08:29:13 -08:00

util

[REFACT] Updated paramkit. Use function from paramkit for conversions

2021-09-07 09:42:14 +02:00

.appveyor.yml

[NOBIN] AppVeyor: changes in copying the artifacts

2022-01-23 15:23:49 -08:00

.gitignore

[FEATURE] Added version info

2022-11-05 06:20:08 -07:00

.gitmodules

[REFACT] Refactored to parse parameters via ParamKit

2021-09-06 19:20:23 +02:00

CMakeLists.txt

[NOBIN] Switch to CMake 3.0

2022-11-05 16:05:57 -07:00

Doxyfile

[NOBIN] Added logo to Doxyfile

2021-08-09 18:23:25 +02:00

hh_params.cpp

[FEATURE] Set default output directory to: hollows_hunter.dumps

2022-01-09 17:38:29 -08:00

hh_params.h

[FEATURE] Set default output directory to: hollows_hunter.dumps

2022-01-09 17:38:29 -08:00

hh_report.cpp

[FEATURE] Added human-readable scan datetime to the report

2022-01-22 13:32:22 -08:00

hh_report.h

[BUGFIX] Use GetTickCount instead of GetTickCount64 (it is not available on 32 bit Windows) - Issue #13

2022-09-24 00:30:34 +02:00

hh_res.rc

[FEATURE] Added version info

2022-11-05 06:20:08 -07:00

hh_scanner.cpp

[BUGFIX] Use GetTickCount instead of GetTickCount64 (it is not available on 32 bit Windows) - Issue #13

2022-09-24 00:30:34 +02:00

hh_scanner.h

[REFACT] Use lists from ParamKit

2021-09-07 11:22:43 +02:00

hh_ver_short.h

[FEATURE] Added version info

2022-11-05 06:20:08 -07:00

LICENSE

[NOBIN] Year up

2023-01-02 16:20:52 -08:00

main.cpp

[FEATURE] Added version info

2022-11-05 06:20:08 -07:00

mingw_build.sh

Update mingw_build.sh

2020-12-29 15:27:01 +01:00

README.md

Update README.md

2022-04-12 14:33:29 +02:00

resources.h

[NOBIN] Added logo

2021-08-09 15:39:37 +02:00

resources.rc

[NOBIN] Added logo

2021-08-09 15:39:37 +02:00

term_util.cpp

[BUGFIX] After printing in color, go back to the real previous color

2020-07-03 11:43:58 +02:00

term_util.h

[FEATURE] Change logo color depending on the base terminal color

2020-07-06 07:03:48 -07:00

README.md

hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

📦 Uses: PE-sieve (the library version).

❓ PE-sieve FAQ - Frequently Asked Questions

📖 Read Wiki

Clone

Use recursive clone to get the repo together with all the submodules:

git clone --recursive https://github.com/hasherezade/hollows_hunter.git

Builds

Download the latest release, or read more.

Available also via Chocolatey