Skip to content

tumagonx/ozone

BranchesTags

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
MAKEFILE
MAKEFILE
 
 
README.md
README.md
 
 
Sources
Sources
 
 
TODO
TODO
 
 
accessmask.c
accessmask.c
 
 
accessmask.h
accessmask.h
 
 
atom.c
atom.c
 
 
atom.h
atom.h
 
 
boprot.c
boprot.c
 
 
boprot.h
boprot.h
 
 
debug.c
debug.c
 
 
debug.h
debug.h
 
 
dirobj.c
dirobj.c
 
 
dirobj.h
dirobj.h
 
 
driver.c
driver.c
 
 
driver.h
driver.h
 
 
driver.sln
driver.sln
 
 
driver.vcproj
driver.vcproj
 
 
driverobj.c
driverobj.c
 
 
driverobj.h
driverobj.h
 
 
event.c
event.c
 
 
event.h
event.h
 
 
file.c
file.c
 
 
file.h
file.h
 
 
hookproc.c
hookproc.c
 
 
hookproc.h
hookproc.h
 
 
i386.c
i386.c
 
 
i386.h
i386.h
 
 
job.c
job.c
 
 
job.h
job.h
 
 
learn.c
learn.c
 
 
learn.h
learn.h
 
 
log.c
log.c
 
 
log.h
log.h
 
 
media.c
media.c
 
 
media.h
media.h
 
 
misc.c
misc.c
 
 
misc.h
misc.h
 
 
mutant.c
mutant.c
 
 
mutant.h
mutant.h
 
 
network.c
network.c
 
 
network.h
network.h
 
 
ntproto.h
ntproto.h
 
 
pathproc.c
pathproc.c
 
 
pathproc.h
pathproc.h
 
 
policy.c
policy.c
 
 
policy.h
policy.h
 
 
port.c
port.c
 
 
port.h
port.h
 
 
process.c
process.c
 
 
process.h
process.h
 
 
procname.c
procname.c
 
 
procname.h
procname.h
 
 
registry.c
registry.c
 
 
registry.h
registry.h
 
 
resource.h
resource.h
 
 
section.c
section.c
 
 
section.h
section.h
 
 
semaphore.c
semaphore.c
 
 
semaphore.h
semaphore.h
 
 
symlink.c
symlink.c
 
 
symlink.h
symlink.h
 
 
sysinfo.c
sysinfo.c
 
 
sysinfo.h
sysinfo.h
 
 
time.c
time.c
 
 
time.h
time.h
 
 
timer.c
timer.c
 
 
timer.h
timer.h
 
 
token.c
token.c
 
 
token.h
token.h
 
 
userland.c
userland.c
 
 
userland.h
userland.h
 
 
vdm.c
vdm.c
 
 
vdm.h
vdm.h
 
 
wireless.c
wireless.c
 
 
wireless.h
wireless.h
 
 

Repository files navigation

#Introduction

This is mirror source code released by securityarchitects.com, the one that provide ASLR for Windows NT5 (beside Wehntrust). This consist driver only (agent/client not included) but will read .policy files like the one provided by Ozone installer.

#Issues (in my experience)

  • As with XP SP3 with recent updates, Ozone will nag you for some normal explorer.exe operation
  • Ozone use process name only to identify, thus one could impersonate easily by just renaming executable

About

Ozone kernel mode driver, a mirror of http://www.securityarchitects.com/OzoneAgentKernel.zip

Resources

Readme
Activity

Stars

3 stars

Watchers

3 watching

Forks

3 forks
Report repository

Releases

No releases published

Packages

No packages published

Languages