noury/mirror-ac
1
0
Fork 0
mirror of https://github.com/donnaskiez/ac.git synced 2024-11-21 22:24:08 +01:00
Code Issues Projects Releases Packages Wiki Activity

stupid fucking wdf drivers ruining evberything

Browse source
This commit is contained in:
lhodges1 2023-08-20 01:12:25 +10:00
parent f3124359c8
commit 29209607f4
2 changed files with 62 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
driver/driver.c
View file

@ -49,7 +49,7 @@ NTSTATUS DriverEntry(
DriverObject->MajorFunction[ IRP_MJ_DEVICE_CONTROL ] = DeviceControl; DriverObject->MajorFunction[ IRP_MJ_DEVICE_CONTROL ] = DeviceControl;
DriverObject->DriverUnload = DriverUnload; DriverObject->DriverUnload = DriverUnload;
DEBUG_LOG( "DonnaAC Driver Entry Complete" ); DEBUG_LOG( "DonnaAC Driver Entry Complete. type: %lx", DriverObject->DeviceObject->DeviceType );
return status; return status;
} }

73
driver/modules.c
View file

@ -9,9 +9,12 @@ NTSTATUS ValidateDriverIOCTLDispatchRegion(
_In_ PBOOLEAN Flag _In_ PBOOLEAN Flag
) )
{ {
if ( !Modules || !Driver || !Flag )
return STATUS_INVALID_PARAMETER;
UINT64 dispatch_function; UINT64 dispatch_function;
UINT64 base = ( UINT64 )Driver->DriverStart; UINT64 ntoskrnl_base = 0;
UINT64 end = base + Driver->DriverSize; UINT64 ntoskrnl_end = 0;
*Flag = TRUE; *Flag = TRUE;
@ -25,18 +28,68 @@ NTSTATUS ValidateDriverIOCTLDispatchRegion(
if ( dispatch_function == NULL ) if ( dispatch_function == NULL )
return STATUS_SUCCESS; return STATUS_SUCCESS;
DEBUG_LOG( "Current function: %llx", dispatch_function ); /* grab ntoskrnl region as default handler is located in here */
if ( dispatch_function >= base && dispatch_function <= end ) for ( INT index = 0; index < Modules->module_count; index++ )
{ {
DEBUG_LOG( "THIS ADDRESS IS INSIDE ITS REGIUON :)" ); PRTL_MODULE_EXTENDED_INFO system_module = ( PRTL_MODULE_EXTENDED_INFO )(
( uintptr_t )Modules->address + index * sizeof( RTL_MODULE_EXTENDED_INFO ) );
if ( strstr(system_module->FullPathName, "ntoskrnl.exe" ) )
{
ntoskrnl_base = ( UINT64 )system_module->ImageBase;
ntoskrnl_end = ntoskrnl_base + system_module->ImageSize;
break;
}
}
if ( !ntoskrnl_base || !ntoskrnl_end )
return STATUS_ABANDONED;
DEBUG_LOG( "ntoskrnl base: %llx, end: %llx", ntoskrnl_base, ntoskrnl_end );
for ( INT index = 0; index < Modules->module_count; index++ )
{
PRTL_MODULE_EXTENDED_INFO system_module = ( PRTL_MODULE_EXTENDED_INFO )(
( uintptr_t )Modules->address + index * sizeof( RTL_MODULE_EXTENDED_INFO ) );
if ( system_module->ImageBase != Driver->DriverStart )
continue;
if ( Driver->DeviceObject == NULL )
continue;
if ( dispatch_function >= ntoskrnl_base && dispatch_function <= ntoskrnl_end )
continue;
if ( dispatch_function >= system_module->ImageBase && dispatch_function <= ( UINT64 )system_module->ImageBase + system_module->ImageSize )
return STATUS_SUCCESS;
//if ( Driver->DeviceObject->DeviceType != NULL )
// continue;
DEBUG_LOG( "name: %s, base: %p, size: %lx, dispatch: %llx, type: %lx",
system_module->FullPathName,
system_module->ImageBase,
system_module->ImageSize,
dispatch_function,
Driver->DeviceObject->DeviceType);
*Flag = FALSE;
DEBUG_ERROR( "system modules ioctl dispatch is outside of its region" );
return STATUS_SUCCESS; return STATUS_SUCCESS;
} }
DEBUG_ERROR( "Driver with invalid IOCTL dispatch routine found" ); //DEBUG_LOG( "Current function: %llx", dispatch_function );
*Flag = FALSE;
return STATUS_SUCCESS; //if ( dispatch_function >= base && dispatch_function <= end )
//{
// DEBUG_LOG( "THIS ADDRESS IS INSIDE ITS REGIUON :)" );
// return STATUS_SUCCESS;
//}
//DEBUG_ERROR( "Driver with invalid IOCTL dispatch routine found" );
//*Flag = FALSE;
} }
VOID InitDriverList( VOID InitDriverList(
@ -294,10 +347,6 @@ NTSTATUS ValidateDriverObjects(
InvalidDriverListHead->count += 1; InvalidDriverListHead->count += 1;
AddDriverToList( InvalidDriverListHead, current_driver, REASON_INVALID_IOCTL_DISPATCH ); AddDriverToList( InvalidDriverListHead, current_driver, REASON_INVALID_IOCTL_DISPATCH );
} }
else
{
DEBUG_LOG( "All drivers have valid dispatch routines :)" );
}
sub_entry = sub_entry->ChainLink; sub_entry = sub_entry->ChainLink;
} }