-
这篇文档是在Windows NT操作系统下隐藏对象、文件、服务、进程等的技术。这种方法是基于Windows API函数的挂钩。 这篇文章中所描述的技术都是从我写...
这篇文档是在Windows NT操作系统下隐藏对象、文件、服务、进程等的技术。这种方法是基于Windows API函数的挂钩。 这篇文章中所描述的技术都是从我写rootkit的研究成果，所以它能写rootkit更有效果并且更简单。这里也同样包括了我的实践。 在这篇文档中隐藏对象意味着改变某些用来命名这些对象的系统函数，使它们将忽略这些对象的名字。这样一来我们改动的那些函数的返回值表示这些对象根本就不存在。 最基本的方法(除去少数不同的)是我们用原始的参数调用原始的函数，然后我们改变它们的输出。 在这篇文章里将描述隐藏文件、进程、注册表键和键值、系统服务和驱动、分配的内存还有句柄。-This document is in the Windows NT operating system hidden objects, documents, services, process technology. This method is based on the Windows API function link. This article describes techniques are, I wrote rootkit from the results of research, so it was rootkit more effective and more simple. Here, too, including my practice. In this document hidden object means certain changes to these objects naming system functions so that they will ignore these objects by name. So we change those functions return values, said these objects simply do not exist. The most basic method (excluding a few different) is that we should call the original parameters of the original function, and then we change their
- 2022-03-07 17:00:50下载
- 积分：1
-
运行和检测多个实例
运行和检测多个实例- Moves and examines many examples
- 2022-03-20 15:22:32下载
- 积分：1
-
this book is also about how the Linux kernel works and how to adapt its workings...
this book is also about how the Linux kernel works and how to adapt its workings to your needs or interests.
英文版 pdf-this book is also about how the Linux kernel works and how to adapt its workings to your needs or interests. English pdf
- 2022-04-14 23:57:51下载
- 积分：1
-
TASM Compiler for free used.
TASM Compiler for free used.-processor used Compiler for free.
- 2022-04-24 12:23:10下载
- 积分：1
-
我接触DLL的时间也不长，对DLL的了解也不是很深，在这里以一个简单的例子说明一下应用程序与DLL是如何工作的，希望给初学者一些帮助。文章附有源码，以编译通过。...
我接触DLL的时间也不长，对DLL的了解也不是很深，在这里以一个简单的例子说明一下应用程序与DLL是如何工作的，希望给初学者一些帮助。文章附有源码，以编译通过。-I contacted the time is not long, right DLL understanding is not very deep here in a simple examples to illustrate what applications and how the DLL is working, and hopes to give some help beginners. Articles with source code to compile.
- 2022-12-31 05:20:04下载
- 积分：1
-
完全实现注册表处理，文件处理。服务端采用多线程服务，能最好的处理SOCKET请求。数据接收、发送函数可以说是现阶段最好的，采用异步重叠操作。可以取得被控机器上的...
完全实现注册表处理，文件处理。服务端采用多线程服务，能最好的处理SOCKET请求。数据接收、发送函数可以说是现阶段最好的，采用异步重叠操作。可以取得被控机器上的硬件信息，文件信息，注册表以及进行屏幕控制。 代码中的SOCKET重叠I/O的实现也很值得参-complete registry handling, document handling. Server using multithreading services will best address SOCKET request. Data reception, sending function can be said at this stage the best, using asynchronous overlapping operations. Machines can get charged with the hardware information, document information, registry and control for the screen. SOCKET code of overlapping I/O is also the realization worth Participation
- 2023-07-22 03:45:06下载
- 积分：1
-
一个实时看鼠标所在点的RGB值的程序
一个实时看鼠标所在点的RGB值的程序--The program which can view the RGB value of the point of mouse
- 2023-07-10 00:30:02下载
- 积分：1
-
c语言学习：包括c语言的库函数，和开发工具
c语言学习：包括c语言的库函数，和开发工具-c language learning: including c language library function, and development tools
- 2023-03-10 02:50:04下载
- 积分：1
-
目录遍历，每发现一个文件提供处理函数，方便遍历中的处理
目录遍历，每发现一个文件提供处理函数，方便遍历中的处理-Directory traversal, each found in a document processing function to facilitate the traversal of the treatment
- 2023-06-12 22:40:03下载
- 积分：1
-
的ks8995包含五个10 / 100物理层
The KS8995 contains five 10/100 physical layer
transceivers, five MAC (Media Access Control) units
with an integrated layer 2 switch. The device runs in
two modes. The first mode is a five port integrated
switch and the second is as a five port switch with the
fifth port decoupled from the physical port. In this
mode access to the fifth MAC is provided using a
MII (Media Independent Interface).
- 2022-02-10 04:57:09下载
- 积分：1
