-
这篇文档是在Windows NT操作系统下隐藏对象、文件、服务、进程等的技术。这种方法是基于Windows API函数的挂钩。 这篇文章中所描述的技术都是从我写...
这篇文档是在Windows NT操作系统下隐藏对象、文件、服务、进程等的技术。这种方法是基于Windows API函数的挂钩。 这篇文章中所描述的技术都是从我写rootkit的研究成果,所以它能写rootkit更有效果并且更简单。这里也同样包括了我的实践。 在这篇文档中隐藏对象意味着改变某些用来命名这些对象的系统函数,使它们将忽略这些对象的名字。这样一来我们改动的那些函数的返回值表示这些对象根本就不存在。 最基本的方法(除去少数不同的)是我们用原始的参数调用原始的函数,然后我们改变它们的输出。 在这篇文章里将描述隐藏文件、进程、注册表键和键值、系统服务和驱动、分配的内存还有句柄。-This document is in the Windows NT operating system hidden objects, documents, services, process technology. This method is based on the Windows API function link. This article describes techniques are, I wrote rootkit from the results of research, so it was rootkit more effective and more simple. Here, too, including my practice. In this document hidden object means certain changes to these objects naming system functions so that they will ignore these objects by name. So we change those functions return values, said these objects simply do not exist. The most basic method (excluding a few different) is that we should call the original parameters of the original function, and then we change their
- 2022-03-07 17:00:50下载
- 积分:1
-
NT services for the preparation of the template, inside the band has prepared a...
这是一个编写NT服务程序的模板,里面带了一个已编写好的自动关闭程序的小服务,在对付经常占用你机子打游戏的菜鸟是非常好用的-NT services for the preparation of the template, inside the band has prepared a good self-closing procedures of small services, deal with the recurrent use of your loom playing the game as they are very handy! !
- 2022-05-19 13:59:09下载
- 积分:1
-
DELPHI编写的HOOK API实现DLL全局钩子启动记事本的程序
DELPHI编写的HOOK API实现DLL全局钩子启动记事本的程序-DELPHI prepared HOOK API to achieve the overall hook DLL procedures start Notepad
- 2023-01-07 19:20:03下载
- 积分:1
-
Read the Windows environment more CPU utilization
读取Windows环境下多CPU的利用率-Read the Windows environment more CPU utilization
- 2022-06-13 23:48:24下载
- 积分:1
-
简单的东西,相当简单,注册表
简单的东西,相当简单,注册表-Canals and other cavity in Western frontier, gaze intently twisted Canals, etc. Note chat barrels
- 2023-02-21 04:10:03下载
- 积分:1
-
VB6开发的WINDOWS服务管理库,可用于加载/取消系统服务,获取服务状态等等....
VB6开发的WINDOWS服务管理库,可用于加载/取消系统服务,获取服务状态等等.-VB6 development WINDOWS service management database can be used to load/cancellation system services, access to services, the state and so on.
- 2022-03-10 17:14:57下载
- 积分:1
-
VC写的一个光驱控制程序 有VC源代码
VC写的一个光驱控制程序 有VC源代码-VC to write a CD-ROM control procedures have VC source code
- 2022-07-08 20:33:12下载
- 积分:1
-
可执行文件EXE、DLL、OCX的程序资源查看程序,可以看ICO,BMP,DIALOG,STRING等各种资源,非常值得看一看...
可执行文件EXE、DLL、OCX的程序资源查看程序,可以看ICO,BMP,DIALOG,STRING等各种资源,非常值得看一看-executable EXE, DLL, OCX procedures resources View procedures can be seen ICO, BMP, DIALOG, STRING and other resources, is worth looking at the very
- 2022-02-20 14:36:06下载
- 积分:1
-
基于VHDL语言,实现串行通讯接口功能的主程序
基于VHDL语言,实现串行通讯接口功能的主程序-The use of VHDL language implementation of the serial communication interface program
- 2022-03-10 17:29:08下载
- 积分:1
-
利用打印驱动程序生成SVG文件,很好的源代码下载把
利用打印驱动程序生成SVG文件,很好的源代码下载把-Use printer driver to generate SVG documents, a very good source code to download the
- 2022-05-26 04:54:46下载
- 积分:1