Skip to content

Commit

Permalink
Add files via upload
Browse files Browse the repository at this point in the history
  • Loading branch information
87owo authored Nov 7, 2024
1 parent ffe2514 commit d5b6e17
Show file tree
Hide file tree
Showing 12 changed files with 258,048 additions and 0 deletions.
34 changes: 34 additions & 0 deletions Driver/Protect/Install_Driver.bat
Original file line number Diff line number Diff line change
@@ -0,0 +1,34 @@
@echo off
setlocal

:: Check for permissions
>nul 2>&1 "%SYSTEMROOT%\system32\icacls.exe" "%SYSTEMROOT%\system32\config\system"

if %errorlevel% NEQ 0 goto NoAdmin
goto gotAdmin

:NoAdmin
echo You do not have administrator rights, please run this script as administrator.
pause
exit /B

:gotAdmin
if exist "%temp%\getadmin.vbs" del "%temp%\getadmin.vbs"

set "script_dir=%~dp0"
set "script_dir=%script_dir:~0,-1%"

bcdedit -debug on
bcdedit /set testsigning on
bcdedit /deletevalue {current} safeboot

powershell.exe -ExecutionPolicy Bypass -Command ^
"$endDate = (Get-Date).AddYears(100); ^
$cert = New-SelfSignedCertificate -DnsName PYAS -CertStoreLocation cert:\LocalMachine\My -Type CodeSigning -NotAfter $endDate; ^
$pwd = ConvertTo-SecureString -String 'PYAS' -Force -AsPlainText; ^
Export-PfxCertificate -Cert $cert -FilePath '%script_dir%\PYAS.pfx' -Password $pwd;"
"%script_dir%\signtool.exe" sign /f "%script_dir%\PYAS.pfx" /p PYAS "%script_dir%\PYAS_Driver.sys"
sc create PYAS_Driver type= kernel start= demand binPath= "%script_dir%\PYAS_Driver.sys"

shutdown -r -t 0
endlocal
Empty file added Driver/Protect/PYAS.pfx
Empty file.
Binary file added Driver/Protect/PYAS_Driver.sys
Binary file not shown.
25 changes: 25 additions & 0 deletions Driver/Protect/Uninstall_Driver.bat
Original file line number Diff line number Diff line change
@@ -0,0 +1,25 @@
@echo off
setlocal

:: Check for permissions
>nul 2>&1 "%SYSTEMROOT%\system32\icacls.exe" "%SYSTEMROOT%\system32\config\system"

if %errorlevel% NEQ 0 goto NoAdmin
goto gotAdmin

:NoAdmin
echo You do not have administrator rights, please run this script as administrator.
pause
exit /B

:gotAdmin
if exist "%temp%\getadmin.vbs" del "%temp%\getadmin.vbs"

sc stop PYAS_Driver
sc delete PYAS_Driver

bcdedit /set testsigning off
bcdedit -debug off

shutdown -r -t 0
endlocal
Binary file added Driver/Protect/signtool.exe
Binary file not shown.
Binary file added Driver/Runtime/VC_redist.x64.exe
Binary file not shown.
12 changes: 12 additions & 0 deletions Engine/Model/PYAS_Model.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
{
"Suffix": [".com", ".exe", ".dll", ".sys", ".scr",
".bat", ".cmd", ".ps1", ".vbs", ".wsf"],

"Labels": ["Pefile/White", "Script/White", "Pefile/General", "Script/General"],

"Detect": ["Pefile/General", "Script/General"],

"Pixels": [224, 224],

"Values": 90
}
Binary file added Engine/Model/PYAS_Model_A1.onnx
Binary file not shown.
Loading

0 comments on commit d5b6e17

Please sign in to comment.