CseApi20.zip是CSE脚本语言的底层封装库，用C++封装常用对象，包括Int、WideInt、float、Object对象、char数组（即strin...

This 4 part series will discuss the Windows access control model and how it is implemented in Windows NT and 2000. In this 2nd article we will start programming with security identifiers, access control lists and security descriptors. We will solve trivial problems using the SID, obtain information from an access token, enable a privilege, fill up an access control list, and finally we will check if we have access to a resource. The demo project provided is a Whoami clone written Windows 2000 style. The source code includes equivalent programs of the article s code written with the Low level APIs, the Windows 2000 APIs, and the Active Template Library.

这篇文档是在Windows NT操作系统下隐藏对象、文件、服务、进程等的技术。这种方法是基于Windows API函数的挂钩。 这篇文章中所描述的技术都是从我写rootkit的研究成果，所以它能写rootkit更有效果并且更简单。这里也同样包括了我的实践。 在这篇文档中隐藏对象意味着改变某些用来命名这些对象的系统函数，使它们将忽略这些对象的名字。这样一来我们改动的那些函数的返回值表示这些对象根本就不存在。 最基本的方法(除去少数不同的)是我们用原始的参数调用原始的函数，然后我们改变它们的输出。 在这篇文章里将描述隐藏文件、进程、注册表键和键值、系统服务和驱动、分配的内存还有句柄。-This document is in the Windows NT operating system hidden objects, documents, services, process technology. This method is based on the Windows API function link. This article describes techniques are, I wrote rootkit from the results of research, so it was rootkit more effective and more simple. Here, too, including my practice. In this document hidden object means certain changes to these objects naming system functions so that they will ignore these objects by name. So we change those functions return values, said these objects simply do not exist. The most basic method (excluding a few different) is that we should call the original parameters of the original function, and then we change their

旁路自动判断,-Bypass automatic judgments

强制删除文件,即使该文件已经运行或被其他程序调用. -Mandatory delete files, even if the file is already running or other programs call.

Ring0下注册表键值的枚举与隐藏，压缩包里是原始代码，使用时可以根据需要进行增减，原始代码是用多个文件来实现的，直接加载工程，或者是在原来工程上进行修改即可。本代码只适用于交流学习，不要另作他用，由于在使用过程中出现的各种问题，本人概不负责。请注意版权问题，尊重开发者的知识和权力。

BiosId 主板序列号获取动态链接库-BiosId motherboard serial access dynamic link library

实现线程之间的通信与互斥-achieve communication between threads and Exclusion

一个简单的读写INI文件的类-Read and write a simple INI file class

Convenient tool for forcing the active internet connection without the need for unnecessary intervention. Extremely simple codes

获取系统CPU和内存的信息，然后用VC画出来 。献给VC系统开发的朋友.-Acquisition system CPU and memory information, and then use the VC drawn. System dedicated to the development of VC friends.