| Filename | Size | Update |
|---|
| Rootkit\RootKit在Linux下的工作原理及其检测.pdf |
| .......\Rootkit让后门隐藏无踪影.pdf |
| .......\Windows RootKit技术原理及防御策略.pdf |
| .......\Windows操作系统下内核级Rootkitss隐蔽技术研究.pdf |
| .......\【专题四】Rootkit的学习与研究\Read me.txt |
| .......\.............................\.ootkit\1。 内核hook\1）object hook\1）object hook.doc |
| .......\.............................\.......\............\2）ssdt hook\2）ssdt hook.doc |
| .......\.............................\.......\............\............\SSDT Hook的妙用－对抗ring0 inline hook .doc |
| .......\.............................\.......\............\............\swk0207.rar |
| .......\.............................\.......\............\3）inline-hook\360SuperKill学习之--恢复FSD的IRP处理函数.doc |
| .......\.............................\.......\............\..............\3）inline-hook.doc |
| .......\.............................\.......\............\..............\cnnic.rar |
| .......\.............................\.......\............\..............\ExpLookupHandleTableEntry.rar |
| .......\.............................\.......\............\..............\ExpLookupHandleTableEntry2.rar |
| .......\.............................\.......\............\..............\kill_SecuritySoftware.rar |
| .......\.............................\.......\............\..............\PsLookupProcessByProcessId执行流程学习笔记.doc |
| .......\.............................\.......\............\..............\句柄啊，3层表啊，ExpLookupHandleTableEntry啊.doc |
| .......\.............................\.......\............\..............\干掉KV 2008 | Rising等大部分杀软.doc |
| .......\.............................\.......\............\..............\搜索未导出的函数地址.doc |
| .......\.............................\.......\............\4）idt hook\bhwin_keysniff.rar |
| .......\.............................\.......\............\...........\IDT Hook .doc |
| .......\.............................\.......\............\5）IRP hook\5）IRP hook.doc |
| .......\.............................\.......\............\...........\irphook1.rar |
| .......\.............................\.......\............\...........\irphook2.rar |
| .......\.............................\.......\............\...........\irphook3.rar |
| .......\.............................\.......\............\6）SYSENTER hook\6）SYSENTER hook.doc |
| .......\.............................\.......\............\................\SysEnterHook.rar |
| .......\.............................\.......\............\7）IAT HOOK\7）IAT HOOK.doc |
| .......\.............................\.......\............\...........\HybridHook.rar |
| .......\.............................\.......\............\...........\testtest.rar |
| .......\.............................\.......\............\8）EAT HOOK\8）EAT HOOK.doc |
| .......\.............................\.......\............\...........\利用导出表来禁止一些驱动程序的加载.doc |
| .......\.............................\.......\............\...........\导出表钩子.rar |
| .......\.............................\.......\2。保护模式篇章第一部分： ring3进ring0之门\1)通过调用门访问内核\1)通过调用门访问内核.doc |
| .......\.............................\.......\..........................................\....................\myCallGate.rar |
| .......\.............................\.......\..........................................\....................\test.rar |
| .......\.............................\.......\..........................................\2)通过中断门访问内核\2)通过中断门访问内核.doc |
| .......\.............................\.......\..........................................\....................\myIntGate.rar |
| .......\.............................\.......\..........................................\3)通过任务门访问内核\3)通过任务门访问内核.doc |
| .......\.............................\.......\..........................................\....................\MyTaskGate.rar |
| .......\.............................\.......\..........................................\4)通过陷阱门访问内核\4)通过陷阱门访问内核.doc |
| .......\.............................\.......\..........................................\....................\exe.rar |
| .......\................. |