mrexodia Posted February 3, 2015 Author Share Posted February 3, 2015 These are the correct commands:bcdedit /set testsigning onbcdedit /debug onbcdedit /dbgsettings local /noumexAlso do this fix if you want to use Print Screen: https://bitbucket.org/mrexodia/titanhide/src/e0f82305a159bcbb00696cdc7b61ae91b77ad002/BreakOnSysRq.reg?at=master 1 Link to comment
Tomay Posted February 6, 2015 Share Posted February 6, 2015 (edited) These are the correct commands: bcdedit /set testsigning on bcdedit /debug on bcdedit /dbgsettings local /noumex Also do this fix if you want to use Print Screen: https://bitbucket.org/mrexodia/titanhide/src/e0f82305a159bcbb00696cdc7b61ae91b77ad002/BreakOnSysRq.reg?at=master OK, I will try this, because the previous commands didn't worked for me. EDIT: Didn't worked either Edited February 6, 2015 by Tomay Link to comment
CodeEnding Posted February 10, 2015 Share Posted February 10, 2015 thank you very much Link to comment
mrexodia Posted February 11, 2015 Author Share Posted February 11, 2015 OK, I will try this, because the previous commands didn't worked for me. EDIT: Didn't worked either You're right, recently I discovered this doesn't actually work. You should try KPP Destroyer, it works great! Link to comment
Tomay Posted February 14, 2015 Share Posted February 14, 2015 You're right, recently I discovered this doesn't actually work. You should try KPP Destroyer, it works great! It may work on previous releases of windows 8 & 8.1, But I have updated my system (Windows 8.1 Enterprise x64) with the latest updates available. Link to comment
mrexodia Posted February 14, 2015 Author Share Posted February 14, 2015 It may work on previous releases of windows 8 & 8.1, But I have updated my system (Windows 8.1 Enterprise x64) with the latest updates available. Which means? I don't think microsoft patched this approach. I installed it about 5 days ago, it was working fine. Link to comment
krisipio Posted March 1, 2015 Share Posted March 1, 2015 BSOD on service start at win 7 ultimate SP1 x64, used rev 12. I attached the minidumps, they might be of some use to you. I dont use any AV.Minidump.rar 1 Link to comment
GIV Posted March 13, 2015 Share Posted March 13, 2015 XP SP3 X86 = BSODWin 7 SP1 X64 = BSODPatchGuard disabled via KPP destroyer. Here is the minidump for Win7. 031315-26176-01.7z Link to comment
mrexodia Posted March 21, 2015 Author Share Posted March 21, 2015 Updated to V0013! Changelog: - MIT license - crappy win10 support - fixed some exploits kao found - hopefully now the .sys works on win7 (target = win7 instead of win8.1) Download: https://bitbucket.org/mrexodia/titanhide/downloads 4 Link to comment
hahoa Posted June 13, 2015 Share Posted June 13, 2015 this looks such a badass keep up the good work Link to comment
BOSCH Posted July 21, 2015 Share Posted July 21, 2015 Mr.exodia because TitanHide.sys it doens't have a digital signature and windows 8.1 don't let me install it.What i can do to bypass the windows protection? Link to comment
mrexodia Posted July 27, 2015 Author Share Posted July 27, 2015 BOSCH: You will have to figure that out by yourself I'm afraid. You should look for KPP Destroyer, but you need to do some manual work to disable PatchGuard completely. In the readme there is also more information on disabling driver signature verification (just enable test signing). Using this driver is not safe for your computer. There could be file system corruption bugs etc. This is why I don't provide an easy one-click installer. People need to be proficient enough to disable patchguard with some googling/programming before they use this kind of drivers. Obviously you can also use Windows XP x32 if you don't want to worry about PatchGuard or driver signature verification Link to comment
GIV Posted July 29, 2015 Share Posted July 29, 2015 In Win XP SP3 on my PC the driver still crash the PC on load. Link to comment
mrexodia Posted July 31, 2015 Author Share Posted July 31, 2015 In Win XP SP3 on my PC the driver still crash the PC on load. Yep, I never said it would work on XP Just that it wouldn't complain about certificates or PatchGuard. Link to comment
HackHand Posted September 3, 2015 Share Posted September 3, 2015 Hi, I am using win7 x64 and have used "disable_pg_ds_v3.rar - - Disable PatchGuard & Driver Signing on X64 Windows 7 + SP1", anyway I get an error message when I want to start the TitanHide. C:\Windows\system32>sc start TitanHide[sC] StartService FAILED 6:The handle is invalid. Link to comment
HackHand Posted September 20, 2015 Share Posted September 20, 2015 I have asked the above question couple of weeks ago. I have not gotten any help yet. I searched and tried to fix the issue however I failed since I don't know why this error occurs. Link to comment
cra0 Posted September 23, 2015 Share Posted September 23, 2015 (edited) I just tried this i started the service put in the PID of the x64 debugger in the GUI hit hide for all and it still shows up using the test wtf? -edit- just ran it with cheatengine along with its debugger still nothing- Edited September 23, 2015 by cra0 Link to comment
mrexodia Posted September 26, 2015 Author Share Posted September 26, 2015 first check if you have TitanHide running. There should be a log file in C:\TitanHide.log 1 Link to comment
testor930 Posted September 27, 2015 Share Posted September 27, 2015 (edited) Some protectors possess memory protection and you'll crash randomly when altering anything that is being executed during the runtime.In my case I have got a themida protected program which will crash after running an manipulated function a few time. Does TitanHide also fix this kind of protections? (Ollydbg log: Debugged program set single step flag (bit T in EFL). I don't know how to step command at address 7C90E514(KiFastSystemCallRet) correctly. Try to set breakpoint on next command and run. / Don't know how to continue because memory at address 0x200 is not readable (EIP = 200)) Edit:With the driver on win xp3 the process will still hang and crash at KiFastSystemCallRet after it calls WaitForSingleObject on main thread, so it must be because of one thread that does protection. Wherethe last call was to setThreadPriority->..->setInformationThread and corrupted stack return 200. Edited September 27, 2015 by testor930 Link to comment
JAYceM6 Posted October 20, 2015 Share Posted October 20, 2015 cool tool on x64, find a Expired certificate Link to comment
GIV Posted December 30, 2015 Share Posted December 30, 2015 Hi all. I have tested the TitanHide on X64 Win7 Ultimate. Even i do all patches i find on web and respect instructions to disable patchguard from manual or driver signature check and even start Win 7 with F8 and select proper menu driver checking skip i get a invalig signature for the driver by the OS and the driver is not started. Can someone present me a reliable way to get this driver to work Under Win 7 X64? Link to comment
mrexodia Posted January 4, 2016 Author Share Posted January 4, 2016 @GIV you need to be in TESTSIGNING mode on Windows 7 x64. You also need to disable PatchGuard, which requires patching of your kernel. KPP Destroyer does this but it might have been patched by Microsoft Here is a custom version of KPP Destroyer that I did https://mega.nz/#!CspBhLAD!wGH6e_s7GWAz9OZgKWsDXX-2H4JyDfkAh-wmhCaAkqI usage http://forum.cheatengine.org/viewtopic.php?t=573311 I will download a Win7 x64 ISO and see if I can find some time to write a tutorial for you. Link to comment
GIV Posted January 4, 2016 Share Posted January 4, 2016 Hi. I have testsinging set to ON and used the same KPP destroyer version as you. I even restarted the OS and select the proper menu option at startup (F8) to disable driver signature and does not work. Who knows... maybe i miss some thing but i did not succeeded until now to setup the driver. I wait your info. P.S. A better new year to all. Link to comment
mrexodia Posted January 7, 2016 Author Share Posted January 7, 2016 @GIV I tried today, but I couldn't get it to work either. Maybe there is a bug with KPP Destroyer. I will check it a little more but my interest is not very high in this project right now. Link to comment
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now