hasherezade/hollows_hunter

mirror of https://github.com/hasherezade/hollows_hunter.git synced 2026-10-11 21:49:55 +00:00

T

hasherezade b96da62488 [NOBIN] Added Doxyfile and config for automated docs deployment

2021-08-02 14:58:13 +02:00

.github/workflows

[NOBIN] Added Doxyfile and config for automated docs deployment

2021-08-02 14:58:13 +02:00

[FEATURE] Updated pe-sieve. Added data mode 5: to scan inaccessible pages, but not other non-exec

2021-07-30 18:57:21 +02:00

pe-sieve @ 223430b4c0

Updated pe-sieve

2021-08-02 14:55:52 +02:00

[BUGFIX] Fixed headers (to compile with MinGW)

2021-06-25 19:03:41 +02:00

.appveyor.yml

[NOBIN] Updated installation directory

2020-03-13 00:01:20 +01:00

.gitignore

[NOBIN] Added Doxyfile and config for automated docs deployment

2021-08-02 14:58:13 +02:00

.gitmodules

[INIT] Added submodule PE-sieve

2018-01-11 18:42:09 +01:00

CMakeLists.txt

[FEATURE] Added processes exclusion list (Issue #10 )

2021-06-08 00:29:31 +02:00

color_scheme.h

[FEATURE] In case of unknown param, check for similar strings

2021-04-30 17:06:12 +02:00

Doxyfile

[NOBIN] Added Doxyfile and config for automated docs deployment

2021-08-02 14:58:13 +02:00

hh_params.cpp

[FEATURE] Removed a parameter: mfilter

2021-06-14 00:52:57 +02:00

hh_params.h

[FEATURE] Added processes exclusion list (Issue #10 )

2021-06-08 00:29:31 +02:00

hh_report.cpp

[BUGFIX] Do not exclude scans with errors form the list of suspicious

2021-08-01 12:09:23 +02:00

hh_report.h

[FEATURE] Report count of all the scanned processes

2021-03-03 07:13:11 +01:00

hh_scanner.cpp

[BUGFIX] Fixed invalid variables

2021-06-25 19:18:03 +02:00

hh_scanner.h

[BUGFIX] Fixed headers (to compile with MinGW)

2021-06-25 19:03:41 +02:00

LICENSE

[NOBIN] Year up

2020-01-02 04:23:24 +01:00

main.cpp

[REFACT] Small changes in printing the version info

2021-08-01 13:01:47 +02:00

mingw_build.sh

Update mingw_build.sh

2020-12-29 15:27:01 +01:00

README.md

Update README.md

2021-02-18 03:47:03 +01:00

term_util.cpp

[BUGFIX] After printing in color, go back to the real previous color

2020-07-03 11:43:58 +02:00

term_util.h

[FEATURE] Change logo color depending on the base terminal color

2020-07-06 07:03:48 -07:00

README.md

hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

📦 Uses library: PE-sieve (the DLL version).

Clone

Use recursive clone to get the repo together with all the submodules:

git clone --recursive https://github.com/hasherezade/hollows_hunter.git

Builds

Download the latest release, or read more.