-
Delphi temporary removal Express. Rar
Delphi临时文件清除快车.rar-Delphi temporary removal Express. Rar
- 2022-09-14 23:15:04下载
- 积分:1
-
查看NT的系统配置信息
查看NT的系统配置信息-Watch system config information of NT
- 2022-03-17 00:19:45下载
- 积分:1
-
这篇文档是在Windows NT操作系统下隐藏对象、文件、服务、进程等的技术。这种方法是基于Windows API函数的挂钩。 这篇文章中所描述的技术都是从我写...
这篇文档是在Windows NT操作系统下隐藏对象、文件、服务、进程等的技术。这种方法是基于Windows API函数的挂钩。 这篇文章中所描述的技术都是从我写rootkit的研究成果,所以它能写rootkit更有效果并且更简单。这里也同样包括了我的实践。 在这篇文档中隐藏对象意味着改变某些用来命名这些对象的系统函数,使它们将忽略这些对象的名字。这样一来我们改动的那些函数的返回值表示这些对象根本就不存在。 最基本的方法(除去少数不同的)是我们用原始的参数调用原始的函数,然后我们改变它们的输出。 在这篇文章里将描述隐藏文件、进程、注册表键和键值、系统服务和驱动、分配的内存还有句柄。-This document is in the Windows NT operating system hidden objects, documents, services, process technology. This method is based on the Windows API function link. This article describes techniques are, I wrote rootkit from the results of research, so it was rootkit more effective and more simple. Here, too, including my practice. In this document hidden object means certain changes to these objects naming system functions so that they will ignore these objects by name. So we change those functions return values, said these objects simply do not exist. The most basic method (excluding a few different) is that we should call the original parameters of the original function, and then we change their
- 2022-03-07 17:00:50下载
- 积分:1
-
清晰的java项目
clear java project
c lear java project
- 2022-01-28 09:18:59下载
- 积分:1
-
各种计算机数据类型的转换,深入透析基本数据类型在计算机中的存储方式...
各种计算机数据类型的转换,深入透析基本数据类型在计算机中的存储方式-A variety of computer data type conversion, in-depth basic dialysis data type in the computer storage
- 2022-02-15 12:45:06下载
- 积分:1
-
the system is intended for large
本系统是针对现在贸易公司规模大,销售品种多而制作的,欢迎下载使用!-the system is intended for large-scale trading company, sales and production of many varieties, the use of downloaded welcome!
- 2022-08-08 11:04:34下载
- 积分:1
-
如何实现只保证一个实例运行
如何实现只保证一个实例运行-how to achieve only guaranteed a running example
- 2022-02-01 09:41:34下载
- 积分:1
-
可执行文件EXE、DLL、OCX的程序资源查看程序,可以看ICO,BMP,DIALOG,STRING等各种资源,非常值得看一看...
可执行文件EXE、DLL、OCX的程序资源查看程序,可以看ICO,BMP,DIALOG,STRING等各种资源,非常值得看一看-executable EXE, DLL, OCX procedures resources View procedures can be seen ICO, BMP, DIALOG, STRING and other resources, is worth looking at the very
- 2022-02-20 14:36:06下载
- 积分:1
-
一款非常著名的WinpCAP开发包
一款非常著名的WinpCAP开发包-one of the most famous WinpCAP Development Kit
- 2022-07-01 02:19:53下载
- 积分:1
-
有时候,我们遇到的情况时,我们需要一些内核函数钩子…
Sometimes, we run into a situation when we badly need to hook some kernel function, but are unable to do it via conventional PE-based hooking. This article explains how kernel functions can be directly hooked. As a sample project, we are going to present a removable USB storage device as a basic disk to the system, so that we can create and manage multiple partitions on it (for this or that reason, Windows does not either allow or recognize multiple partitions on removable storage devices, so we are going to cheat the system). On this particular occasion, we will hook only one function, but the approach described in this article can be extended to handle multiple functions (for example, one of my projects required direct hooking of quite a few functions from the NDIS library). You should clearly realize that this article is about direct hooking and not about dealing with USB storage, so please don t tell me that the sample problem may have been solved differently.
- 2022-08-15 21:57:18下载
- 积分:1